package/system/refpolicy/Makefile

   1 #
   2 # This is free software, licensed under the GNU General Public License v2.
   3 # See /LICENSE for more information.
   4 #
   5
   6 include $(TOPDIR)/rules.mk
   7
   8 PKG_NAME:=refpolicy
   9 PKG_VERSION:=2.20200229
  10 PKG_RELEASE:=1
  11
  12 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  13 PKG_SOURCE_URL:=https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_2_20200229
  14 PKG_HASH:=dec854512ed00cd057408f330c2cea4de7a4405f7a147458f59c994bf578e4b0
  15 PKG_INSTALL:=1
  16 PKG_BUILD_DEPENDS:=checkpolicy/host policycoreutils/host
  17
  18 PKG_MAINTAINER:=Thomas Petazzoni <thomas.petazzoni@bootlin.com>
  19 PKG_CPE_ID:=cpe:/a:tresys:refpolicy
  20 PKG_LICENSE:=GPL-2.0-or-later
  21 PKG_LICENSE_FILES:=COPYING
  22
  23 TAR_OPTIONS:=--transform='s%^refpolicy%$(PKG_NAME)-$(PKG_VERSION)%' -xf -
  24
  25 include $(INCLUDE_DIR)/package.mk
  26
  27 define Package/refpolicy
  28   SECTION:=system
  29   CATEGORY:=Base system
  30   TITLE:=SELinux reference policy
  31   URL:=http://selinuxproject.org/page/Main_Page
  32 endef
  33
  34 define Package/refpolicy/description
  35         The SELinux Reference Policy project (refpolicy) is a
  36         complete SELinux policy that can be used as the system
  37         policy for a variety of systems and used as the basis for
  38         creating other policies. Reference Policy was originally
  39         based on the NSA example policy, but aims to accomplish many
  40         additional goals.
  41
  42         The current refpolicy does not fully support OpenWRT and
  43         needs modifications to work with the default system file
  44         layout. These changes should be added as patches to the
  45         refpolicy that modify a single SELinux policy.
  46
  47         The refpolicy works for the most part in permissive
  48         mode. Only the basic set of utilities are enabled in the
  49         example policy config and some of the pathing in the
  50         policies is not correct.  Individual policies would need to
  51         be tweaked to get everything functioning properly.
  52 endef
  53
  54 # Yes, we want CC=$(HOSTCC) because the only code that checkpolicy
  55 # builds is a small host tool that gets run as part of the build
  56 # process.
  57 MAKE_FLAGS += \
  58         TEST_TOOLCHAIN="$(STAGING_DIR_HOSTPKG)" \
  59         BINDIR=/bin \
  60         SBINDIR=/sbin \
  61         CC="$(HOSTCC)" \
  62         CFLAGS="$(HOST_CFLAGS)"
  63
  64 define Build/Configure
  65         $(SED) "/MONOLITHIC/c\MONOLITHIC = y" $(PKG_BUILD_DIR)/build.conf
  66         $(SED) "/NAME/c\NAME = targeted" $(PKG_BUILD_DIR)/build.conf
  67         $(call Build/Compile/Default,conf)
  68 endef
  69
  70 define Package/refpolicy/conffiles
  71 /etc/selinux/config
  72 endef
  73
  74 define Package/refpolicy/install
  75         $(INSTALL_DIR) $(1)/etc/selinux
  76         $(CP) $(PKG_INSTALL_DIR)/etc/selinux/* $(1)/etc/selinux/
  77         $(CP) ./files/selinux-config $(1)/etc/selinux/config
  78 endef
  79
  80 $(eval $(call BuildPackage,refpolicy))