*** empty log message ***
This commit is contained in:
parent
6e9bcb4a8d
commit
3debd0a982
@ -41,3 +41,4 @@ serefpolicy-2.2.13.tgz
|
|||||||
serefpolicy-2.2.14.tgz
|
serefpolicy-2.2.14.tgz
|
||||||
serefpolicy-2.2.15.tgz
|
serefpolicy-2.2.15.tgz
|
||||||
serefpolicy-2.2.16.tgz
|
serefpolicy-2.2.16.tgz
|
||||||
|
serefpolicy-2.2.17.tgz
|
||||||
|
@ -1048,14 +1048,14 @@ pcmcia = module
|
|||||||
#
|
#
|
||||||
# Common policy for authentication and user login.
|
# Common policy for authentication and user login.
|
||||||
#
|
#
|
||||||
authlogin = module
|
authlogin = base
|
||||||
|
|
||||||
# Layer: system
|
# Layer: system
|
||||||
# Module: libraries
|
# Module: libraries
|
||||||
#
|
#
|
||||||
# Policy for system libraries.
|
# Policy for system libraries.
|
||||||
#
|
#
|
||||||
libraries = module
|
libraries = base
|
||||||
|
|
||||||
# Layer: system
|
# Layer: system
|
||||||
# Module: raid
|
# Module: raid
|
||||||
|
@ -1,11 +1,14 @@
|
|||||||
%define distro redhat
|
%define distro redhat
|
||||||
%define monolithic n
|
%define monolithic n
|
||||||
|
%define BUILD_STRICT 0
|
||||||
|
%define BUILD_TARGETED 0
|
||||||
|
%define BUILD_MLS 1
|
||||||
%define POLICYVER 20
|
%define POLICYVER 20
|
||||||
%define POLICYCOREUTILSVER 1.29.18-1
|
%define POLICYCOREUTILSVER 1.29.18-1
|
||||||
%define CHECKPOLICYVER 1.28-3
|
%define CHECKPOLICYVER 1.28-3
|
||||||
Summary: SELinux policy configuration
|
Summary: SELinux policy configuration
|
||||||
Name: selinux-policy
|
Name: selinux-policy
|
||||||
Version: 2.2.16
|
Version: 2.2.17
|
||||||
Release: 1
|
Release: 1
|
||||||
License: GPL
|
License: GPL
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
@ -36,18 +39,6 @@ SELinux Base package
|
|||||||
%{_mandir}/man8/*
|
%{_mandir}/man8/*
|
||||||
%doc /usr/share/doc/%{name}-%{version}
|
%doc /usr/share/doc/%{name}-%{version}
|
||||||
|
|
||||||
%package targeted
|
|
||||||
Summary: SELinux targeted base policy
|
|
||||||
Group: System Environment/Base
|
|
||||||
Provides: selinux-policy-base
|
|
||||||
Obsoletes: selinux-policy-targeted-sources
|
|
||||||
Prereq: policycoreutils >= %{POLICYCOREUTILSVER}
|
|
||||||
Prereq: coreutils
|
|
||||||
Prereq: selinux-policy = %{version}-%{release}
|
|
||||||
|
|
||||||
%description targeted
|
|
||||||
SELinux Reference policy targeted base module.
|
|
||||||
|
|
||||||
%define setupCmds() \
|
%define setupCmds() \
|
||||||
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} bare \
|
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} bare \
|
||||||
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} conf \
|
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} conf \
|
||||||
@ -63,6 +54,8 @@ make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic}
|
|||||||
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/policy \
|
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/policy \
|
||||||
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/modules/active \
|
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/modules/active \
|
||||||
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/contexts/files \
|
%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/contexts/files \
|
||||||
|
touch $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/modules/semanage.read.LOCK \
|
||||||
|
touch $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%1/modules/semanage.trans.LOCK \
|
||||||
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} enableaudit \
|
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} enableaudit \
|
||||||
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} base.pp \
|
make NAME=%1 TYPE=%2 DISTRO=%{distro} DIRECT_INITRC=%3 MONOLITHIC=%{monolithic} base.pp \
|
||||||
install -m0644 base.pp ${RPM_BUILD_ROOT}%{_usr}/share/selinux/%1/enableaudit.pp \
|
install -m0644 base.pp ${RPM_BUILD_ROOT}%{_usr}/share/selinux/%1/enableaudit.pp \
|
||||||
@ -87,6 +80,8 @@ install -m0644 ${RPM_SOURCE_DIR}/setrans-%1.conf ${RPM_BUILD_ROOT}%{_sysconfdir}
|
|||||||
%config(noreplace) %{_sysconfdir}/selinux/%1/setrans.conf \
|
%config(noreplace) %{_sysconfdir}/selinux/%1/setrans.conf \
|
||||||
%ghost %{_sysconfdir}/selinux/%1/seusers \
|
%ghost %{_sysconfdir}/selinux/%1/seusers \
|
||||||
%dir %{_sysconfdir}/selinux/%1/modules \
|
%dir %{_sysconfdir}/selinux/%1/modules \
|
||||||
|
%{_sysconfdir}/selinux/%1/modules/semanage.read.LOCK \
|
||||||
|
%{_sysconfdir}/selinux/%1/modules/semanage.trans.LOCK \
|
||||||
%attr(700,root,root) %dir %{_sysconfdir}/selinux/%1/modules/active \
|
%attr(700,root,root) %dir %{_sysconfdir}/selinux/%1/modules/active \
|
||||||
#%verify(not md5 size mtime) %attr(600,root,root) %config(noreplace) %{_sysconfdir}/selinux/%1/modules/active/seusers \
|
#%verify(not md5 size mtime) %attr(600,root,root) %config(noreplace) %{_sysconfdir}/selinux/%1/modules/active/seusers \
|
||||||
%dir %{_sysconfdir}/selinux/%1/policy/ \
|
%dir %{_sysconfdir}/selinux/%1/policy/ \
|
||||||
@ -143,6 +138,7 @@ SELinux Reference Policy - modular.
|
|||||||
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8/
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8/
|
||||||
install -m 644 man/man8/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/
|
install -m 644 man/man8/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/
|
||||||
|
|
||||||
|
%if 0
|
||||||
# Build targeted policy
|
# Build targeted policy
|
||||||
# Commented out because only targeted ref policy currently builds
|
# Commented out because only targeted ref policy currently builds
|
||||||
%setupCmds targeted targeted-mcs y
|
%setupCmds targeted targeted-mcs y
|
||||||
@ -153,6 +149,7 @@ install -m 644 man/man8/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/
|
|||||||
make NAME=strict TYPE=strict-mcs DISTRO=%{distro} DIRECT_INITRC=y MONOLITHIC=%{monolithic} bare
|
make NAME=strict TYPE=strict-mcs DISTRO=%{distro} DIRECT_INITRC=y MONOLITHIC=%{monolithic} bare
|
||||||
make NAME=strict TYPE=strict-mcs DISTRO=%{distro} DIRECT_INITRC=y MONOLITHIC=%{monolithic} conf
|
make NAME=strict TYPE=strict-mcs DISTRO=%{distro} DIRECT_INITRC=y MONOLITHIC=%{monolithic} conf
|
||||||
%installCmds strict strict-mcs y
|
%installCmds strict strict-mcs y
|
||||||
|
%endif
|
||||||
|
|
||||||
# Build mls policy
|
# Build mls policy
|
||||||
%setupCmds mls strict-mls n
|
%setupCmds mls strict-mls n
|
||||||
@ -168,6 +165,19 @@ ln -sf ./include/Makefile ${RPM_BUILD_ROOT}/usr/share/selinux/refpolicy/Makefile
|
|||||||
%clean
|
%clean
|
||||||
%{__rm} -fR $RPM_BUILD_ROOT
|
%{__rm} -fR $RPM_BUILD_ROOT
|
||||||
|
|
||||||
|
%if 0
|
||||||
|
%package targeted
|
||||||
|
Summary: SELinux targeted base policy
|
||||||
|
Group: System Environment/Base
|
||||||
|
Provides: selinux-policy-base
|
||||||
|
Obsoletes: selinux-policy-targeted-sources
|
||||||
|
Prereq: policycoreutils >= %{POLICYCOREUTILSVER}
|
||||||
|
Prereq: coreutils
|
||||||
|
Prereq: selinux-policy = %{version}-%{release}
|
||||||
|
|
||||||
|
%description targeted
|
||||||
|
SELinux Reference policy targeted base module.
|
||||||
|
|
||||||
%files targeted
|
%files targeted
|
||||||
%fileList targeted
|
%fileList targeted
|
||||||
|
|
||||||
@ -212,6 +222,7 @@ fi
|
|||||||
|
|
||||||
%triggerpostun targeted -- selinux-policy-targeted <= 2.0.7
|
%triggerpostun targeted -- selinux-policy-targeted <= 2.0.7
|
||||||
%rebuildpolicy targeted
|
%rebuildpolicy targeted
|
||||||
|
%endif
|
||||||
|
|
||||||
%package mls
|
%package mls
|
||||||
Summary: SELinux mls base policy
|
Summary: SELinux mls base policy
|
||||||
@ -238,6 +249,7 @@ SELinux Reference policy mls base module.
|
|||||||
%files mls
|
%files mls
|
||||||
%fileList mls
|
%fileList mls
|
||||||
|
|
||||||
|
%if 0
|
||||||
%package strict
|
%package strict
|
||||||
Summary: SELinux strict base policy
|
Summary: SELinux strict base policy
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
@ -263,6 +275,8 @@ SELinux Reference policy strict base module.
|
|||||||
%files strict
|
%files strict
|
||||||
%fileList strict
|
%fileList strict
|
||||||
|
|
||||||
|
%endif
|
||||||
|
|
||||||
%package devel
|
%package devel
|
||||||
Summary: SELinux policy devel sources
|
Summary: SELinux policy devel sources
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
|
Loading…
Reference in New Issue
Block a user