diff --git a/refpolicy/Changelog b/refpolicy/Changelog index dcda94cc..160a73e5 100644 --- a/refpolicy/Changelog +++ b/refpolicy/Changelog @@ -1,3 +1,4 @@ +- Add targets for sechecker. - Updated to sedoctool to read bool files and tunable files separately. - Changed the xml tag of to to be consistent diff --git a/refpolicy/Makefile b/refpolicy/Makefile index 6bcd936d..d01f7396 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy SETFILES := $(SBINDIR)/setfiles GENHOMEDIRCON := $(SBINDIR)/genhomedircon XMLLINT := $(BINDIR)/xmllint +SECHECK := $(BINDIR)/sechecker CFLAGS := -Wall diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic index 259e287a..830cebe7 100644 --- a/refpolicy/Rules.monolithic +++ b/refpolicy/Rules.monolithic @@ -201,6 +201,16 @@ relabel: $(FC) $(SETFILES) fi $(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS) +######################################## +# +# Run policy source checks +# +check: policy.conf $(FC) + $(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res + +longcheck: policy.conf $(FC) + $(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res + ######################################## # # Clean the sources @@ -210,5 +220,6 @@ clean: rm -f policy.conf rm -f policy.$(PV) rm -f $(FC) + rm -f *.res -.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean +.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean