add sechecker targets

This commit is contained in:
Chris PeBenito 2005-10-12 19:13:49 +00:00
parent c4bf979302
commit 8df65f137f
3 changed files with 14 additions and 1 deletions

View File

@ -1,3 +1,4 @@
- Add targets for sechecker.
- Updated to sedoctool to read bool files and tunable - Updated to sedoctool to read bool files and tunable
files separately. files separately.
- Changed the xml tag of <boolean> to <bool> to be consistent - Changed the xml tag of <boolean> to <bool> to be consistent

View File

@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy
SETFILES := $(SBINDIR)/setfiles SETFILES := $(SBINDIR)/setfiles
GENHOMEDIRCON := $(SBINDIR)/genhomedircon GENHOMEDIRCON := $(SBINDIR)/genhomedircon
XMLLINT := $(BINDIR)/xmllint XMLLINT := $(BINDIR)/xmllint
SECHECK := $(BINDIR)/sechecker
CFLAGS := -Wall CFLAGS := -Wall

View File

@ -201,6 +201,16 @@ relabel: $(FC) $(SETFILES)
fi fi
$(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS) $(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
########################################
#
# Run policy source checks
#
check: policy.conf $(FC)
$(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res
longcheck: policy.conf $(FC)
$(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res
######################################## ########################################
# #
# Clean the sources # Clean the sources
@ -210,5 +220,6 @@ clean:
rm -f policy.conf rm -f policy.conf
rm -f policy.$(PV) rm -f policy.$(PV)
rm -f $(FC) rm -f $(FC)
rm -f *.res
.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean .PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean