forked from pool/checkpolicy
9f184f92ec
- Update to version 3.6 https://github.com/SELinuxProject/selinux/releases/tag/3.6 * checkpolicy: Add the command line argument -N, --disable-neverallow * dispol: add option to display users, drop duplicate option to display booleans, show number of entries before listing them * dispol: Add the ability to show booleans, classes, roles, types and type attributes of policies * dispol: add options: --actions ACTIONS, --help * dismod: add options: --actions ACTIONS, --help * Add notself support for neverallow rules * Improve man pages * man pages: Remove the Russian translations * Add notself and other support to CIL * Add support for deny rules * Translations updated from https://translate.fedoraproject.org/projects/selinux/ * Bug fixes - Remove keys from keyring since they expired: - E853C1848B0185CF42864DF363A8AD4B982C4373 Petr Lautrbach <plautrba@redhat.com> - 63191CE94183098689CAB8DB7EF137EC935B0EAF Jason Zaman <jasonzaman@gmail.com> - Add key to keyring: - B8682847764DF60DF52D992CBC3905F235179CF1 Petr Lautrbach <lautrbach@redhat.com> OBS-URL: https://build.opensuse.org/request/show/1134066 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/checkpolicy?expand=0&rev=63
93 lines
3.0 KiB
RPMSpec
93 lines
3.0 KiB
RPMSpec
#
|
|
# spec file for package checkpolicy
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define libsepol_ver 3.6
|
|
Name: checkpolicy
|
|
Version: 3.6
|
|
Release: 0
|
|
Summary: SELinux policy compiler
|
|
License: GPL-2.0-or-later
|
|
Group: Productivity/Security
|
|
URL: https://github.com/SELinuxProject/selinux
|
|
Source0: https://github.com/SELinuxProject/selinux/releases/download/%{version}/%{name}-%{version}.tar.gz
|
|
Source1: https://github.com/SELinuxProject/selinux/releases/download/%{version}/%{name}-%{version}.tar.gz.asc
|
|
Source2: checkpolicy.keyring
|
|
Source3: checkpolicy-tests.tar.gz
|
|
BuildRequires: bison
|
|
BuildRequires: flex
|
|
BuildRequires: libselinux-devel
|
|
BuildRequires: libsepol-devel-static => %{libsepol_ver}
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
|
|
%description
|
|
checkpolicy is the SELinux policy compiler. It uses libsepol to
|
|
generate the binary policy.
|
|
|
|
(Security-enhanced Linux is a feature of the kernel and some
|
|
utilities that implement mandatory access control policies, such as
|
|
Type Enforcement, Role-based Access Control and Multi-Level
|
|
Security.)
|
|
|
|
%package devel
|
|
Summary: Development files for SELinux policy compiler
|
|
Group: Development/Libraries/C and C++
|
|
Requires: %{name} = %{version}
|
|
|
|
%description devel
|
|
checkpolicy is the SELinux policy compiler. It uses libsepol to
|
|
generate the binary policy.
|
|
|
|
This package contains the development files, which are
|
|
necessary to develop your own software using checkpolicy.
|
|
|
|
%package -n python3-%{name}
|
|
Summary: Python bindings for SELinux policy compiler
|
|
Group: Development/Libraries/Python
|
|
Requires: %{name} = %{version}
|
|
|
|
%description -n python3-%{name}
|
|
checkpolicy is the SELinux policy compiler. It uses libsepol to
|
|
generate the binary policy.
|
|
|
|
This package contains the Python bindindgs, which are necessary
|
|
to use checkpolicy from Python.
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
make clean
|
|
make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" %{?_smp_mflags}
|
|
make -C test LIBDIR="%{_libdir}" CFLAGS="%{optflags}" %{?_smp_mflags}
|
|
|
|
%install
|
|
mkdir -p %{buildroot}/%{_bindir}
|
|
%make_install LIBDIR="%{_libdir}"
|
|
install test/dismod %{buildroot}/%{_bindir}/sedismod
|
|
install test/dispol %{buildroot}/%{_bindir}/sedispol
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%{_bindir}/checkpolicy
|
|
%{_bindir}/checkmodule
|
|
%{_bindir}/sedismod
|
|
%{_bindir}/sedispol
|
|
%{_mandir}/man8/check*.*%{ext_man}
|
|
|
|
%changelog
|