96cda325b1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
52 lines
1.6 KiB
Plaintext
52 lines
1.6 KiB
Plaintext
config BR2_PACKAGE_SELINUX_PYTHON
|
|
bool "selinux-python"
|
|
depends on BR2_USE_MMU
|
|
depends on BR2_USE_WCHAR
|
|
depends on BR2_TOOLCHAIN_HAS_THREADS
|
|
depends on !BR2_STATIC_LIBS
|
|
select BR2_PACKAGE_PYTHON3
|
|
help
|
|
A set of SELinux tools written in python that help with
|
|
managing a system with SELinux enabled. If no packages are
|
|
selected nothing will actually be built.
|
|
|
|
https://github.com/SELinuxProject/selinux/wiki
|
|
|
|
if BR2_PACKAGE_SELINUX_PYTHON
|
|
|
|
config BR2_PACKAGE_SELINUX_PYTHON_AUDIT2ALLOW
|
|
bool "audit2allow"
|
|
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_5 # semodule-utils -> libsepol
|
|
select BR2_PACKAGE_CHECKPOLICY
|
|
select BR2_PACKAGE_SELINUX_PYTHON_SEPOLGEN
|
|
select BR2_PACKAGE_SEMODULE_UTILS
|
|
help
|
|
This module installs two programs:
|
|
|
|
audit2allow - Generate SELinux policy allow/dontaudit rules
|
|
from logs of denied operations.
|
|
|
|
audit2why - translates SELinux audit messages into a
|
|
description of why the access was denied (audit2allow -w)
|
|
|
|
comment "audit2allow needs a toolchain w/ gcc 5"
|
|
depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_5
|
|
|
|
config BR2_PACKAGE_SELINUX_PYTHON_SEPOLGEN
|
|
bool "sepolgen"
|
|
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_5 # semodule-utils -> libsepol
|
|
select BR2_PACKAGE_SEMODULE_UTILS
|
|
help
|
|
This package contains a Python module that allows you to
|
|
generate an initial SELinux policy module template.
|
|
|
|
comment "sepolgen needs a toolchain w/ gcc 5"
|
|
depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_5
|
|
|
|
endif
|
|
|
|
comment "selinux-python packages needs a toolchain w/ wchar, threads, dynamic library"
|
|
depends on BR2_USE_MMU
|
|
depends on !BR2_USE_WCHAR || !BR2_TOOLCHAIN_HAS_THREADS || \
|
|
BR2_STATIC_LIBS
|