add sechecker targets
This commit is contained in:
parent
c4bf979302
commit
8df65f137f
@ -1,3 +1,4 @@
|
|||||||
|
- Add targets for sechecker.
|
||||||
- Updated to sedoctool to read bool files and tunable
|
- Updated to sedoctool to read bool files and tunable
|
||||||
files separately.
|
files separately.
|
||||||
- Changed the xml tag of <boolean> to <bool> to be consistent
|
- Changed the xml tag of <boolean> to <bool> to be consistent
|
||||||
|
@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy
|
|||||||
SETFILES := $(SBINDIR)/setfiles
|
SETFILES := $(SBINDIR)/setfiles
|
||||||
GENHOMEDIRCON := $(SBINDIR)/genhomedircon
|
GENHOMEDIRCON := $(SBINDIR)/genhomedircon
|
||||||
XMLLINT := $(BINDIR)/xmllint
|
XMLLINT := $(BINDIR)/xmllint
|
||||||
|
SECHECK := $(BINDIR)/sechecker
|
||||||
|
|
||||||
CFLAGS := -Wall
|
CFLAGS := -Wall
|
||||||
|
|
||||||
|
@ -201,6 +201,16 @@ relabel: $(FC) $(SETFILES)
|
|||||||
fi
|
fi
|
||||||
$(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
|
$(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
|
||||||
|
|
||||||
|
########################################
|
||||||
|
#
|
||||||
|
# Run policy source checks
|
||||||
|
#
|
||||||
|
check: policy.conf $(FC)
|
||||||
|
$(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res
|
||||||
|
|
||||||
|
longcheck: policy.conf $(FC)
|
||||||
|
$(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# Clean the sources
|
# Clean the sources
|
||||||
@ -210,5 +220,6 @@ clean:
|
|||||||
rm -f policy.conf
|
rm -f policy.conf
|
||||||
rm -f policy.$(PV)
|
rm -f policy.$(PV)
|
||||||
rm -f $(FC)
|
rm -f $(FC)
|
||||||
|
rm -f *.res
|
||||||
|
|
||||||
.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean
|
.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean
|
||||||
|
Loading…
Reference in New Issue
Block a user