add sechecker targets
This commit is contained in:
parent
c4bf979302
commit
8df65f137f
@ -1,3 +1,4 @@
|
||||
- Add targets for sechecker.
|
||||
- Updated to sedoctool to read bool files and tunable
|
||||
files separately.
|
||||
- Changed the xml tag of <boolean> to <bool> to be consistent
|
||||
|
@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy
|
||||
SETFILES := $(SBINDIR)/setfiles
|
||||
GENHOMEDIRCON := $(SBINDIR)/genhomedircon
|
||||
XMLLINT := $(BINDIR)/xmllint
|
||||
SECHECK := $(BINDIR)/sechecker
|
||||
|
||||
CFLAGS := -Wall
|
||||
|
||||
|
@ -201,6 +201,16 @@ relabel: $(FC) $(SETFILES)
|
||||
fi
|
||||
$(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
|
||||
|
||||
########################################
|
||||
#
|
||||
# Run policy source checks
|
||||
#
|
||||
check: policy.conf $(FC)
|
||||
$(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res
|
||||
|
||||
longcheck: policy.conf $(FC)
|
||||
$(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res
|
||||
|
||||
########################################
|
||||
#
|
||||
# Clean the sources
|
||||
@ -210,5 +220,6 @@ clean:
|
||||
rm -f policy.conf
|
||||
rm -f policy.$(PV)
|
||||
rm -f $(FC)
|
||||
rm -f *.res
|
||||
|
||||
.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean
|
||||
.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean
|
||||
|
Loading…
Reference in New Issue
Block a user