1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
|
SUMMARY = "SELinux policy core utilities"
DESCRIPTION = "policycoreutils contains the policy core utilities that are required \
for basic operation of a SELinux system. These utilities include \
load_policy to load policies, setfiles to label filesystems, newrole \
to switch roles, and run_init to run /etc/init.d scripts in the proper \
context."
SECTION = "base"
LICENSE = "GPLv2+"
SRC_URI += "${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \
file://policycoreutils-fixfiles-de-bashify.patch \
file://policycoreutils-fix-fixfiles-install-path.patch \
file://policycoreutils-fix-load_policy-install-path.patch \
"
PAM_SRC_URI = "file://pam.d/newrole \
file://pam.d/run_init \
"
DEPENDS += "libsepol libselinux libsemanage libcap gettext-native"
EXTRA_DEPENDS = "libcap-ng libcgroup"
DEPENDS += "${@['', '${EXTRA_DEPENDS}']['${PN}' != '${BPN}-native']}"
inherit selinux pythonnative
RDEPENDS_${BPN}-fixfiles += "\
${BPN}-setfiles \
grep \
findutils \
"
RDEPENDS_${BPN}-genhomedircon += "\
${BPN}-genhomedircon \
${BPN}-semodule \
"
RDEPENDS_${BPN}-loadpolicy += "\
libselinux \
libsepol \
"
RDEPENDS_${BPN}-newrole += "\
libcap-ng \
libselinux \
"
RDEPENDS_${BPN}-runinit += "libselinux"
RDEPENDS_${BPN}-secon += "libselinux"
RDEPENDS_${BPN}-semodule += "\
libsepol \
libselinux \
libsemanage \
"
# static link to libsepol
RDEPENDS_${BPN}-semodule-expand += "libsepol libselinux"
RDEPENDS_${BPN}-semodule-link += "libsepol libselinux"
RDEPENDS_${BPN}-semodule-package += "libsepol libselinux"
RDEPENDS_${BPN}-sestatus += "libselinux"
RDEPENDS_${BPN}-setfiles += "\
libselinux \
libsepol \
"
RDEPENDS_${BPN}-setsebool += "\
libsepol \
libselinux \
libsemanage \
"
RDEPENDS_${BPN} += "selinux-python"
WARN_QA_remove = " unsafe-references-in-scripts"
ERROR_QA_remove = " unsafe-references-in-scripts"
PACKAGES =+ "\
${PN}-fixfiles \
${PN}-genhomedircon \
${PN}-hll \
${PN}-loadpolicy \
${PN}-newrole \
${PN}-runinit \
${PN}-secon \
${PN}-semodule \
${PN}-sestatus \
${PN}-setfiles \
${PN}-setsebool \
"
FILES_${PN}-fixfiles += "${base_sbindir}/fixfiles"
FILES_${PN}-genhomedircon += "${sbindir}/genhomedircon"
FILES_${PN}-loadpolicy += "\
${base_sbindir}/load_policy \
${sbindir}/load_policy \
"
FILES_${PN}-newrole += "\
${bindir}/newrole \
${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${sysconfdir}/pam.d/newrole', '', d)} \
"
FILES_${PN}-runinit += "\
${sbindir}/run_init \
${sbindir}/open_init_pty \
${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${sysconfdir}/pam.d/run_init', '', d)} \
"
FILES_${PN}-dbg += "${prefix}/libexec/selinux/hll/.debug"
FILES_${PN}-secon += "${bindir}/secon"
FILES_${PN}-semodule += "${sbindir}/semodule"
FILES_${PN}-hll += "${prefix}/libexec/selinux/hll/*"
FILES_${PN}-sestatus += "\
${sbindir}/sestatus \
${sysconfdir}/sestatus.conf \
"
FILES_${PN}-setfiles += "\
${base_sbindir}/restorecon \
${base_sbindir}/setfiles \
"
FILES_${PN}-setsebool += "\
${sbindir}/setsebool \
${datadir}/bash-completion/completions/setsebool \
"
export STAGING_INCDIR
export STAGING_LIBDIR
export BUILD_SYS
export HOST_SYS
PACKAGECONFIG_class-target ?= "\
${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)} \
audit \
"
PACKAGECONFIG[libpam] = ",,libpam,"
PACKAGECONFIG[audit] = ",,audit,"
EXTRA_OEMAKE += "\
${@bb.utils.contains('PACKAGECONFIG', 'libpam', 'PAMH=y', 'PAMH=', d)} \
${@bb.utils.contains('PACKAGECONFIG', 'audit', 'AUDITH=y', 'AUDITH=', d)} \
INOTIFYH=n \
PREFIX=${D} \
"
BBCLASSEXTEND = "native"
PCU_NATIVE_CMDS = "setfiles semodule hll"
do_compile_class-native() {
for PCU_CMD in ${PCU_NATIVE_CMDS} ; do
oe_runmake -C $PCU_CMD \
INCLUDEDIR='${STAGING_INCDIR}' \
LIBDIR='${STAGING_LIBDIR}'
done
}
sysroot_stage_dirs_append_class-native() {
cp -R $from/${prefix}/libexec $to/${prefix}/libexec
}
do_compile_prepend() {
export PYTHON=python
export PYLIBVER='python${PYTHON_BASEVERSION}'
export PYTHON_CPPFLAGS="-I${STAGING_INCDIR}/${PYLIBVER}"
export PYTHON_LDFLAGS="${STAGING_LIBDIR}/lib${PYLIBVER}.so"
export PYTHON_SITE_PKG="${libdir}/${PYLIBVER}/site-packages"
}
do_install_prepend() {
export PYTHON=python
export SBINDIR="${D}/${base_sbindir}"
}
do_install_class-native() {
for PCU_CMD in ${PCU_NATIVE_CMDS} ; do
oe_runmake -C $PCU_CMD install \
DESTDIR="${D}" \
PREFIX="${prefix}" \
SBINDIR="${base_sbindir}"
done
}
do_install_append_class-target() {
if [ -e ${WORKDIR}/pam.d ]; then
install -d ${D}${sysconfdir}/pam.d/
install -m 0644 ${WORKDIR}/pam.d/* ${D}${sysconfdir}/pam.d/
fi
# /var/lib/selinux is involved by seobject.py:
# + dirname = "/var/lib/selinux"
# and it's required for running command:
# $ semanage permissive [OPTS]
install -d ${D}${localstatedir}/lib/selinux
}
|
