SELinux policy core utilities
ab1421e02c
When a file name in type transition rule used in an interface is same as
a keyword, it needs to be M4 escaped so that the keyword is not expanded
by M4, e.g.
- filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "interface")
+ filetrans_pattern($1, virt_var_run_t, virtinterfaced_var_run_t, dir, "``interface''")
But sepolgen-ifgen could not parse such string:
# sepolgen-ifgen
Illegal character '`'
This change allows M4 escaping inside quoted strings and fixed described
problem.
https://bugzilla.redhat.com/show_bug.cgi?id=2254206
Resolves: RHEL-45544
|
||
|---|---|---|
| .fmf | ||
| plans | ||
| .gitignore | ||
| 0001-Don-t-be-verbose-if-you-are-not-on-a-tty.patch | ||
| 0002-sepolicy-generate-Handle-more-reserved-port-types.patch | ||
| 0003-sandbox-Use-matchbox-window-manager-instead-of-openb.patch | ||
| 0004-Use-SHA-2-instead-of-SHA-1.patch | ||
| 0005-python-sepolicy-Fix-spec-file-dependencies.patch | ||
| 0006-sepolgen-ifgen-allow-M4-escaped-filenames.patch | ||
| bachradsusi.gpg | ||
| changelog | ||
| gating.yaml | ||
| policycoreutils.spec | ||
| README.translations | ||
| selinux-autorelabel | ||
| selinux-autorelabel-generator.sh | ||
| selinux-autorelabel-mark.service | ||
| selinux-autorelabel.service | ||
| selinux-autorelabel.target | ||
| sepolicy-help.tgz | ||
| sepolicy-icons.tgz | ||
| sources | ||
| system-config-selinux.png | ||
SELinux translations currently live in the following locations:
- https://translate.fedoraproject.org/projects/selinux/
- contains 2 versions of translatable strings rhel8 (latest RHEL 8 release) and main (Fedora and RHEL 9)
- maintains large number of languages (several of which do not actually contain any translated strings)
- updated by community and partially by RH localization effort
- SELinux source repositories (periodicaly updated from weblate)
- https://github.com/fedora-selinux/selinux
- used for Fedora, latest CentOS and RHEL 9
- https://github.com/SELinuxProject/selinux
- upstream repository
How to update source files on weblate:
$ git clone git@github.com:fedora-selinux/selinux.git
$ cd selinux
# generate new potfiles
$ for p in policycoreutils python gui sandbox; do
cd $p/po
rm $p.pot
make $p.pot
sed -i 's/charset=CHARSET/charset=UTF-8/g' $p.pot
cd -
done
# https://translate.fedoraproject.org/projects/selinux/policycoreutils/en/
# Files -> Upload translations
# Repeat the process for python, gui and sandbox
# or use weblate command line tool (get your API key at https://translate.fedoraproject.org/accounts/profile/#api):
$ for p in policycoreutils python gui sandbox; do
wlc --key <API key> --url https://translate.fedoraproject.org/api/ upload --input $p/po/$p.pot selinux/$p/en --method=source
done
How to pull new translations from weblate
$ git clone git@github.com:fedora-selinux/selinux.git
# https://translate.fedoraproject.org/projects/selinux/policycoreutils
# Files -> Download translation files as ZIP file (save in selinux source directory)
# Repeat the process for python, gui and sandbox
# or use weblate command line tool
$ for p in policycoreutils python gui sandbox; do
wlc --key <API key> --url https://translate.fedoraproject.org/api/ download selinux/$p --output selinux
done
# unzip archives
$ cd selinux
$ for p in policycoreutils python gui sandbox; do
unzip -o selinux-$p.zip -d ..
rm selinux-$p.zip
done
$ git add .
$ git commit