make layer summary required
This commit is contained in:
parent
00172fb7c4
commit
d233bfce3f
@ -306,6 +306,9 @@ enableaudit: policy.conf
|
||||
# Construct file_contexts
|
||||
#
|
||||
$(FC): $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) $(FCSORT)
|
||||
ifeq ($(ALL_FC_FILES),)
|
||||
$(error No enabled modules! $(notdir $(MOD_CONF)) may need to be generated by using "make conf")
|
||||
endif
|
||||
@test -d tmp || mkdir -p tmp
|
||||
$(QUIET) m4 $(M4PARAM) $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) > tmp/$@.tmp
|
||||
$(QUIET) grep -e HOME -e ROLE tmp/$@.tmp > $(HOMEDIR_TEMPLATE)
|
||||
@ -368,7 +371,7 @@ $(MOD_CONF) $(TUNABLES): $(POLXML)
|
||||
# this and its dependents every time the dependencies
|
||||
# change. Also use all .if files here, rather then just the
|
||||
# enabled modules.
|
||||
$(POLXML): $(DETECTED_MODS:.te=.if)
|
||||
$(POLXML): $(DETECTED_MODS:.te=.if) $(foreach dir,$(ALL_LAYERS),$(dir)/$(LAYERXML))
|
||||
@echo "Creating $@"
|
||||
@mkdir -p tmp
|
||||
$(QUIET) echo '<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>' > $@
|
||||
|
@ -1,7 +1,7 @@
|
||||
<!ENTITY % inline.class "pre|p|ul|li">
|
||||
|
||||
<!ELEMENT policy (layer+,tunable*)>
|
||||
<!ELEMENT layer (module+)>
|
||||
<!ELEMENT layer (summary,module+)>
|
||||
<!ATTLIST layer
|
||||
name CDATA #REQUIRED>
|
||||
<!ELEMENT module (summary,desc?,(interface|template)*)>
|
||||
|
@ -0,0 +1,3 @@
|
||||
<summary>
|
||||
Policy modules for administrative functions, such as package management.
|
||||
</summary>
|
@ -0,0 +1 @@
|
||||
<summary>Policy modules for applications</summary>
|
@ -0,0 +1 @@
|
||||
<summary>Policy modules for kernel resources.</summary>
|
@ -0,0 +1,4 @@
|
||||
<summary>
|
||||
Policy modules for system services, like cron, and network services,
|
||||
like sshd.
|
||||
</summary>
|
@ -0,0 +1,3 @@
|
||||
<summary>
|
||||
Policy modules for system functions from init to multi-user login.
|
||||
</summary>
|
Loading…
Reference in New Issue
Block a user