cb328f77f8
This package contains the core policy utilities that are required for basic operation of an SELinux system. Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Niranjan Reddy <niranjan.reddy@rockwellcollins.com> Tested-by: Bryce Ferguson <bryce.ferguson@rockwellcollins.com> Signed-off-by: Bryce Ferguson <bryce.ferguson@rockwellcollins.com> [Thomas: - Move the Config.in comment at the top of the Config.in file rather than between the main option and its sub-options, as this breaks menuconfig indentation. - Fix the propagation of the libsemanage dependencies. libsemanage depends on BR2_PACKAGE_AUDIT_ARCH_SUPPORTS and BR2_TOOLCHAIN_USES_GLIBC which were not accounted for. Since it depends on BR2_TOOLCHAIN_USES_GLIBC, then all the gettext related handling becomes useless and has been removed. - Rename the prompt of the restorecond sub-option to just "restorecond". - Use TARGET_CONFIGURE_OPTS and HOST_CONFIGURE_OPTS instead of passing LDFLAGS, CC, etc. manually. - Use make "foreach" function for loops instead of shell "for" loops. - Rework the explanation of why we're passing DESTDIR at build time. - Minor formatting tweaks here and there.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
62 lines
1.9 KiB
Plaintext
62 lines
1.9 KiB
Plaintext
comment "policycoreutils needs a glibc toolchain w/ threads, dynamic library"
|
|
depends on !BR2_arc
|
|
depends on BR2_PACKAGE_AUDIT_ARCH_SUPPORTS
|
|
depends on !BR2_TOOLCHAIN_USES_GLIBC || \
|
|
!BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
|
|
|
|
config BR2_PACKAGE_POLICYCOREUTILS
|
|
bool "policycoreutils"
|
|
select BR2_PACKAGE_LIBSEMANAGE
|
|
select BR2_PACKAGE_LIBCAP_NG
|
|
depends on BR2_PACKAGE_AUDIT_ARCH_SUPPORTS # libsemanage
|
|
depends on BR2_TOOLCHAIN_HAS_THREADS # libsemanage
|
|
depends on !BR2_STATIC_LIBS #libsemanage
|
|
depends on !BR2_arc # libsemanage
|
|
depends on BR2_TOOLCHAIN_USES_GLIBC # libsemanage
|
|
help
|
|
Policycoreutils is a collection of policy utilities (originally
|
|
the "core" set of utilities needed to use SELinux, although it
|
|
has grown a bit over time), which have different dependencies.
|
|
sestatus, secon, run_init, and newrole only use libselinux.
|
|
load_policy and setfiles only use libselinux and libsepol.
|
|
semodule and semanage use libsemanage (and thus bring in
|
|
dependencies on libsepol and libselinux as well). setsebool
|
|
uses libselinux to make non-persistent boolean changes (via
|
|
the kernel interface) and uses libsemanage to make persistent
|
|
boolean changes.
|
|
|
|
The base package will install the following utilities:
|
|
load_policy
|
|
newrole
|
|
restorecond
|
|
run_init
|
|
secon
|
|
semodule
|
|
semodule_deps
|
|
semodule_expand
|
|
semodule_link
|
|
semodule_package
|
|
sepolgen-ifgen
|
|
sestatus
|
|
setfiles
|
|
setsebool
|
|
|
|
http://selinuxproject.org/page/Main_Page
|
|
|
|
if BR2_PACKAGE_POLICYCOREUTILS
|
|
|
|
config BR2_PACKAGE_POLICYCOREUTILS_RESTORECOND
|
|
bool "restorecond"
|
|
select BR2_PACKAGE_LIBGLIB2
|
|
depends on BR2_USE_WCHAR # glib2
|
|
depends on BR2_TOOLCHAIN_HAS_THREADS # glib2
|
|
depends on BR2_USE_MMU # glib2
|
|
help
|
|
Enable restorecond to be built
|
|
|
|
comment "restorecond needs a toolchain w/ wchar, threads"
|
|
depends on BR2_USE_MMU
|
|
depends on !BR2_USE_WCHAR || !BR2_TOOLCHAIN_HAS_THREADS
|
|
|
|
endif
|