make layer summary required
This commit is contained in:
parent
00172fb7c4
commit
d233bfce3f
@ -306,6 +306,9 @@ enableaudit: policy.conf
|
|||||||
# Construct file_contexts
|
# Construct file_contexts
|
||||||
#
|
#
|
||||||
$(FC): $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) $(FCSORT)
|
$(FC): $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) $(FCSORT)
|
||||||
|
ifeq ($(ALL_FC_FILES),)
|
||||||
|
$(error No enabled modules! $(notdir $(MOD_CONF)) may need to be generated by using "make conf")
|
||||||
|
endif
|
||||||
@test -d tmp || mkdir -p tmp
|
@test -d tmp || mkdir -p tmp
|
||||||
$(QUIET) m4 $(M4PARAM) $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) > tmp/$@.tmp
|
$(QUIET) m4 $(M4PARAM) $(M4SUPPORT) tmp/generated_definitions.conf $(ALL_FC_FILES) > tmp/$@.tmp
|
||||||
$(QUIET) grep -e HOME -e ROLE tmp/$@.tmp > $(HOMEDIR_TEMPLATE)
|
$(QUIET) grep -e HOME -e ROLE tmp/$@.tmp > $(HOMEDIR_TEMPLATE)
|
||||||
@ -368,7 +371,7 @@ $(MOD_CONF) $(TUNABLES): $(POLXML)
|
|||||||
# this and its dependents every time the dependencies
|
# this and its dependents every time the dependencies
|
||||||
# change. Also use all .if files here, rather then just the
|
# change. Also use all .if files here, rather then just the
|
||||||
# enabled modules.
|
# enabled modules.
|
||||||
$(POLXML): $(DETECTED_MODS:.te=.if)
|
$(POLXML): $(DETECTED_MODS:.te=.if) $(foreach dir,$(ALL_LAYERS),$(dir)/$(LAYERXML))
|
||||||
@echo "Creating $@"
|
@echo "Creating $@"
|
||||||
@mkdir -p tmp
|
@mkdir -p tmp
|
||||||
$(QUIET) echo '<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>' > $@
|
$(QUIET) echo '<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>' > $@
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
<!ENTITY % inline.class "pre|p|ul|li">
|
<!ENTITY % inline.class "pre|p|ul|li">
|
||||||
|
|
||||||
<!ELEMENT policy (layer+,tunable*)>
|
<!ELEMENT policy (layer+,tunable*)>
|
||||||
<!ELEMENT layer (module+)>
|
<!ELEMENT layer (summary,module+)>
|
||||||
<!ATTLIST layer
|
<!ATTLIST layer
|
||||||
name CDATA #REQUIRED>
|
name CDATA #REQUIRED>
|
||||||
<!ELEMENT module (summary,desc?,(interface|template)*)>
|
<!ELEMENT module (summary,desc?,(interface|template)*)>
|
||||||
|
@ -0,0 +1,3 @@
|
|||||||
|
<summary>
|
||||||
|
Policy modules for administrative functions, such as package management.
|
||||||
|
</summary>
|
@ -0,0 +1 @@
|
|||||||
|
<summary>Policy modules for applications</summary>
|
@ -0,0 +1 @@
|
|||||||
|
<summary>Policy modules for kernel resources.</summary>
|
@ -0,0 +1,4 @@
|
|||||||
|
<summary>
|
||||||
|
Policy modules for system services, like cron, and network services,
|
||||||
|
like sshd.
|
||||||
|
</summary>
|
@ -0,0 +1,3 @@
|
|||||||
|
<summary>
|
||||||
|
Policy modules for system functions from init to multi-user login.
|
||||||
|
</summary>
|
Loading…
Reference in New Issue
Block a user