From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 14 Nov 2026 17:07:37 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xSGHx-00ApJI-0w for lore@lore.pengutronix.de; Sat, 14 Nov 2026 17:07:37 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xSGHw-00063K-KJ; Sat, 14 Nov 2026 17:07:36 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xSGHp-00060N-38 for ptxdist@pengutronix.de; Sat, 14 Nov 2026 17:07:29 +0100 Received: from ptx.office.stw.pengutronix.de (ptx.office.stw.4.pengutronix.de [10.9.0.3]) (Authenticated sender: relay-from-ptx.office.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 0B122200F2F; Sat, 14 Nov 2026 17:07:29 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794672449; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=i30QCkzbO9nFl670ihwcdJHICrEwi8NFib5Gk9wWSn4=; b=LdjcvM+16yRB3DI0KgmZhu0cJgTrmPCwJwsDXmyBIkhOmsyQOV76XejRiWlvmPMU+Q5dQ3 HWXaLhViZMAYWVlKuXGfc/YdiSjZSpu+R3yq9CyunvPFJrzto3NSeHG2bFO8wnZfEXV+XJ ct53zkEPf5FyzCMG0fBP9l7LoxRuoPsi3pdmQaOFQx+4SOFCYh1QYrPHe9oII9MtiDbdmx xBfqhdmlbvcgNSUx5oPF5zj/Cu8+j1UXoy3hIjcJs7L3IVS0ofEYf1rRB4/IjimfR2WOwG AQNo75gOUOlqRuUmn31nGofGo7nMAxYDwW1C1FG/F18IpOVC0dkG2PA8HH+cHw== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794672449; a=rsa-sha256; cv=none; b=H456Y+or4Icw/yP2tbWPi++qSBj7gsYCR+1ZEO9A/1rMoOWoph1mdqXC8RcL0tOUF+q4tq qxAAvtz4TxG023a4mAFizxQeGvV89UVtc9KLCb0u9l7CEnfu9kk4Fhc14Wl1QugXJOD2+u 3rvB4E48GsNXHYCpGUfP2JmMWa/XUYfYPwq0PPcI1tOrPfcpeCvkH0ltRMleGh0ZeBLicN igHH2Hx6TfF7jeEv9tbc+IUNmfwVUqwNHeQ/3opnGRqMWHMqLUFZPxVoEctBgp/3uO8/Th GLYrJEJDGvm93QWi6rNyniaXU4SGm0l736QyIQgBybzF9vLnRZXVbJ27KLDxag== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-ptx.office.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by ptx.office.stw.pengutronix.de (Postfix, from userid 1014) id E31BD1BF844; Sat, 14 Nov 2026 17:07:28 +0100 (CET) Date: Sat, 14 Nov 2026 17:07:28 +0100 From: Michael Olbrich To: Ladislav Michl Message-ID: References: <20261031203823.357406-1-oss-lists@triops.cz> <20261031203823.357406-17-oss-lists@triops.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20261031203823.357406-17-oss-lists@triops.cz> X-Sent-From: Pengutronix Hildesheim X-URL: http://www.pengutronix.de/ X-IRC: #ptxdist @freenode X-Accept-Language: de,en X-Accept-Content-Type: text/plain Subject: Re: [ptxdist] [PATCH v2 16/17] sepolgen: version bump 1.1.8 -> 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false On Sat, Oct 31, 2026 at 09:38:17PM +0100, Ladislav Michl wrote: > From: Ladislav Michl > > Since SELinux userspace 2.8, the sepolgen python module is shipped in the > selinux-python tarball together with audit2allow, so rename the package > to selinux-python. > > Signed-off-by: Ladislav Michl > --- > CHANGES: > - v2: pass PREFIX, BINDIR, PYTHON, PYTHONLIBDIR and CFLAGS as make > options instead of environment, so they apply to install as well. > > rules/selinux-python.in | 12 +++++++ > rules/selinux-python.make | 68 +++++++++++++++++++++++++++++++++++++++ > rules/sepolgen.in | 29 ----------------- > rules/sepolgen.make | 54 ------------------------------- > 4 files changed, 80 insertions(+), 83 deletions(-) > create mode 100644 rules/selinux-python.in > create mode 100644 rules/selinux-python.make > delete mode 100644 rules/sepolgen.in > delete mode 100644 rules/sepolgen.make > > diff --git a/rules/selinux-python.in b/rules/selinux-python.in > new file mode 100644 > index 000000000..d2f6eb655 > --- /dev/null > +++ b/rules/selinux-python.in > @@ -0,0 +1,12 @@ > +## SECTION=selinux > + > +config SELINUX_PYTHON > + tristate > + prompt "selinux-python" > + select PYTHON3 > + select LIBSEPOL > + select LIBSELINUX > + select LIBSELINUX_PYTHON > + help > + audit2allow and the sepolgen python module it uses to > + generate SELinux policy from audit messages. > diff --git a/rules/selinux-python.make b/rules/selinux-python.make > new file mode 100644 > index 000000000..89e4c0f32 > --- /dev/null > +++ b/rules/selinux-python.make > @@ -0,0 +1,68 @@ > +# -*-makefile-*- > +# > +# Copyright (C) 2013 by Marc Kleine-Budde > +# > +# For further information about the PTXdist project and license conditions > +# see the README file. > +# > + > +# > +# We provide this package > +# > +PACKAGES-$(PTXCONF_SELINUX_PYTHON) += selinux-python > + > +# > +# Paths and names > +# > +SELINUX_PYTHON_VERSION := $(SELINUX_VERSION) > +SELINUX_PYTHON_SHA256 := f854d7fe67981d80c612067e97c1804f641a9dfcca2d38baeb3efe52b7875398 > +SELINUX_PYTHON := selinux-python-$(SELINUX_PYTHON_VERSION) > +SELINUX_PYTHON_SUFFIX := tar.gz > +SELINUX_PYTHON_URL := $(SELINUX_URL)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) > +SELINUX_PYTHON_SOURCE := $(SRCDIR)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) > +SELINUX_PYTHON_DIR := $(BUILDDIR)/$(SELINUX_PYTHON) > +SELINUX_PYTHON_LICENSE := GPL-2.0-only > +SELINUX_PYTHON_LICENSE_FILES := file://LICENSE;md5=393a5ca445f6965873eca0259a17f833 > + > +# ---------------------------------------------------------------------------- > +# Prepare > +# ---------------------------------------------------------------------------- > + > +SELINUX_PYTHON_CONF_TOOL := NO > +SELINUX_PYTHON_MAKE_ENV := $(CROSS_ENV) > +SELINUX_PYTHON_MAKE_OPT = \ > + SUBDIRS="sepolgen audit2allow" \ > + PREFIX=/usr \ > + BINDIR=/usr/bin \ > + PYTHON=$(CROSS_PYTHON3) \ > + PYTHONLIBDIR=$(PYTHON3_SITEPACKAGES) \ > + CFLAGS="-O2 -Wall -g" > +SELINUX_PYTHON_INSTALL_OPT = \ > + $(SELINUX_PYTHON_MAKE_OPT) \ > + install > + > +# ---------------------------------------------------------------------------- > +# Target-Install > +# ---------------------------------------------------------------------------- > + > +$(STATEDIR)/selinux-python.targetinstall: > + @$(call targetinfo) > + > + @$(call install_init, selinux-python) > + @$(call install_fixup, selinux-python,PRIORITY,optional) > + @$(call install_fixup, selinux-python,SECTION,base) > + @$(call install_fixup, selinux-python,AUTHOR,"Marc Kleine-Budde ") > + @$(call install_fixup, selinux-python,DESCRIPTION,missing) > + > + @$(call install_tree, selinux-python, 0, 0, -, $(PYTHON3_SITEPACKAGES)) Again, use install_glob. Michael > + @$(call install_alternative, selinux-python, 0, 0, 0644, /var/lib/sepolgen/perm_map) > + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/audit2allow) > + @$(call install_link, selinux-python, audit2allow, /usr/bin/audit2why) > + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen) > + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen-attr-helper) > + > + @$(call install_finish, selinux-python) > + > + @$(call touch) > + > +# vim: syntax=make > diff --git a/rules/sepolgen.in b/rules/sepolgen.in > deleted file mode 100644 > index 94f2ce071..000000000 > --- a/rules/sepolgen.in > +++ /dev/null > @@ -1,29 +0,0 @@ > -## SECTION=staging > -## old section: > -### SECTION=selinux > - > -config SEPOLGEN > - tristate > - prompt "sepolgen" > - select PYTHON > - select LIBSELINUX > - select LIBSELINUX_PYTHON > - help > - A Python module used in SELinux policy generation > - > - This package contains a Python module that forms the core of > - the modern audit2allow (which is a part of the package > - policycoreutils). The sepolgen library is structured to give > - flexibility to the application using it. The library > - contains: Reference Policy Representation, which are Objects > - for representing policies and the reference policy > - interfaces. Secondly, it has objects and algorithms for > - representing access and sets of access in an abstract way > - and searching that access. It also has a parser for > - reference policy "headers". It contains infrastructure for > - parsing SELinux related messages as produced by the audit > - system. It has facilities for generating policy based on > - required access. > - > - STAGING: remove in ptxdist-2020.06.0 > - Old version that needs to be updated. > diff --git a/rules/sepolgen.make b/rules/sepolgen.make > deleted file mode 100644 > index 7084e1d1d..000000000 > --- a/rules/sepolgen.make > +++ /dev/null > @@ -1,54 +0,0 @@ > -# -*-makefile-*- > -# > -# Copyright (C) 2013 by Marc Kleine-Budde > -# > -# For further information about the PTXdist project and license conditions > -# see the README file. > -# > - > -# > -# We provide this package > -# > -PACKAGES-$(PTXCONF_SEPOLGEN) += sepolgen > - > -# > -# Paths and names > -# > -SEPOLGEN_VERSION := 1.1.8 > -SEPOLGEN_MD5 := d734ff236639cc1bd3a33901774fa98d > -SEPOLGEN := sepolgen-$(SEPOLGEN_VERSION) > -SEPOLGEN_SUFFIX := tar.gz > -SEPOLGEN_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) > -SEPOLGEN_SOURCE := $(SRCDIR)/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) > -SEPOLGEN_DIR := $(BUILDDIR)/$(SEPOLGEN) > -SEPOLGEN_LICENSE := GPL-2.0-only > - > -# ---------------------------------------------------------------------------- > -# Prepare > -# ---------------------------------------------------------------------------- > - > -SEPOLGEN_CONF_TOOL := NO > -# no ':=' because of $(PYTHON_SITEPACKAGES) > -SEPOLGEN_MAKE_ENV = PYTHONLIBDIR=$(PYTHON_SITEPACKAGES) > - > -# ---------------------------------------------------------------------------- > -# Target-Install > -# ---------------------------------------------------------------------------- > - > -$(STATEDIR)/sepolgen.targetinstall: > - @$(call targetinfo) > - > - @$(call install_init, sepolgen) > - @$(call install_fixup, sepolgen,PRIORITY,optional) > - @$(call install_fixup, sepolgen,SECTION,base) > - @$(call install_fixup, sepolgen,AUTHOR,"Marc Kleine-Budde ") > - @$(call install_fixup, sepolgen,DESCRIPTION,missing) > - > - @$(call install_tree, sepolgen, 0, 0, -, $(PYTHON_SITEPACKAGES)) > - @$(call install_alternative, sepolgen, 0, 0, 0644, /var/lib/sepolgen/perm_map) > - > - @$(call install_finish, sepolgen) > - > - @$(call touch) > - > -# vim: syntax=make > -- > 2.47.3 > > > -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |