2 # This is free software, licensed under the GNU General Public License v2.
3 # See /LICENSE for more information.
6 include $(TOPDIR
)/rules.mk
9 PKG_VERSION
:=2.20200229
12 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
13 PKG_SOURCE_URL
:=https
://github.com
/SELinuxProject
/refpolicy
/releases
/download
/RELEASE_2_20200229
14 PKG_HASH
:=dec854512ed00cd057408f330c2cea4de7a4405f7a147458f59c994bf578e4b0
16 PKG_BUILD_DEPENDS
:=checkpolicy
/host policycoreutils
/host
18 PKG_MAINTAINER
:=Thomas Petazzoni
<thomas.petazzoni@bootlin.com
>
19 PKG_CPE_ID
:=cpe
:/a
:tresys
:refpolicy
20 PKG_LICENSE
:=GPL-2.0
-or-later
21 PKG_LICENSE_FILES
:=COPYING
23 TAR_OPTIONS
:=--transform
='s%^refpolicy%$(PKG_NAME)-$(PKG_VERSION)%' -xf
-
25 include $(INCLUDE_DIR
)/package.mk
27 define Package
/refpolicy
/Default
30 TITLE
:=SELinux reference policy
31 URL
:=http
://selinuxproject.org
/page
/Main_Page
35 define Package
/refpolicy
36 $(call Package
/refpolicy
/Default
)
37 CONFLICTS
:=refpolicy-modular
41 define Package
/refpolicy-modular
42 $(call Package
/refpolicy
/Default
)
48 define Package
/refpolicy
/description
49 The SELinux Reference Policy project
(refpolicy
) is a
50 complete SELinux policy that can be used
as the system
51 policy for a variety of systems and used
as the basis for
52 creating other policies. Reference Policy was originally
53 based on the NSA example policy
, but aims to accomplish many
56 The current refpolicy does not fully support OpenWRT and
57 needs modifications to work with the default system file
58 layout. These changes should be added
as patches to the
59 refpolicy that modify a single SELinux policy.
61 The refpolicy works for the most part in permissive
62 mode. Only the basic set of utilities are enabled in the
63 example policy config and some of the pathing in the
64 policies is not correct. Individual policies would need to
65 be tweaked to
get everything functioning properly.
68 # Yes, we want CC=$(HOSTCC) because the only code that checkpolicy
69 # builds is a small host tool that gets run as part of the build
72 DESTDIR
="$(PKG_INSTALL_DIR)"
73 SETFILES
="$(STAGING_DIR_HOST)/bin/setfiles" \
74 CHECKPOLICY
="$(STAGING_DIR_HOSTPKG)/bin/checkpolicy" \
76 CFLAGS
="$(HOST_CFLAGS)"
78 define Build
/Configure
79 $(SED
) "/NAME/c\NAME = targeted" $(PKG_BUILD_DIR
)/build.conf
80 ifneq ($(BUILD_VARIANT
),modular
)
81 $(SED
) "/MONOLITHIC/c\MONOLITHIC = y" $(PKG_BUILD_DIR
)/build.conf
83 $(call Build
/Compile
/Default
,conf
)
86 ifeq ($(BUILD_VARIANT
),modular
)
88 $(call Build
/Compile
/Default
,install install-headers
)
92 define Package
/refpolicy
/conffiles
96 Package
/refpolicy-modular
/conffiles
= $(Package
/refpolicy
/conffiles
)
98 define Package
/refpolicy
/install
99 $(INSTALL_DIR
) $(1)/etc
/selinux
100 $(CP
) $(PKG_INSTALL_DIR
)/etc
/selinux
/* $(1)/etc
/selinux
/
101 $(CP
) .
/files
/selinux-config
$(1)/etc
/selinux
/config
102 ifeq ($(BUILD_VARIANT
),modular
)
103 $(INSTALL_DIR
) $(1)/usr
/share
/selinux
104 $(CP
) $(PKG_INSTALL_DIR
)/usr
/share
/selinux
/* $(1)/usr
/share
/selinux
/
108 Package
/refpolicy-modular
/install = $(Package
/refpolicy
/install)
110 $(eval
$(call BuildPackage
,refpolicy
))
111 $(eval
$(call BuildPackage
,refpolicy-modular
))