buildroot/package/policycoreutils, branch 2017.08

policycoreutils: rework host installation

2017-07-05T14:06:53+00:00

policycoreutils has a pretty peculiar interpretation of DESTDIR and PREFIX. PREFIX is not consistently used: some installation paths and include paths are forced to $(DESTDIR)/usr/... . In other cases, PREFIX is indeed used. PREFIX defaults to $(DESTDIR)/usr Try to be a little bit more correct by passing both DESTDIR and PREFIX, both set to $(HOST_DIR). This is not a complete fix: some things are still installed in $(HOST_DIR)/usr - but nothing we care about (just manpages, systemd services, ...). More importantly, however, it still looks for e.g. D-Bus in $(DESTDIR)/usr/include/dbus-1.0. Still, it's better than nothing. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/bin

2017-07-05T13:19:29+00:00

Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

policycoreutils: fix check-package warnings

2017-04-09T13:33:54+00:00

- 'depends on' before 'select' - rewrap Config.in help text Signed-off-by: Thomas Petazzoni

policycoreutils: add option to build audit2allow

2017-04-09T13:33:54+00:00

This python utility scans the logs for messages logged when the system denied permission for operations, and generates a snippet of policy rules which, if loaded into policy, might have allowed those operations to succeed. However, this utility only generates Type Enforcement (TE) allow rules. Signed-off-by: Adam Duskett Reviewed-by: Matt Weber [Thomas: adjust Config.in to propagate the dependencies of sepolgen, checkpolicy and python3.] Signed-off-by: Thomas Petazzoni

boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+

2017-04-01T13:16:38+00:00

We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\/GPL-2.0/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

policycoreutils: bump version to 2.6

2017-01-25T10:25:26+00:00

Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

policycoreutils: restorecon libglib2 dependency

2016-12-13T09:55:55+00:00

Updated to match Config.in select of libglib2 package as dependency if restorecon is enabled. Signed-off-by: Matthew Weber Signed-off-by: Thomas Petazzoni

policycoreutils: CPPFLAGS undefine _FILE_OFFSET_BITS

2016-12-13T09:55:45+00:00

Undefining _FILE_OFFSET_BITS here because of a "bug" with glibc fts.h large file support. Similar action was taken previously for CFLAGS. Resolves: http://autobuild.buildroot.net/results/4cb/4cb70d776bee01f1284e0c0be5b3fb5f1011353a/ http://autobuild.buildroot.net/results/f43/f438149e7d83475d425e1c1f17550f3cf5f69340/ Signed-off-by: Matthew Weber Signed-off-by: Thomas Petazzoni

policycoreutils: new package

2016-12-10T14:55:31+00:00

This package contains the core policy utilities that are required for basic operation of an SELinux system. Signed-off-by: Clayton Shotwell Signed-off-by: Matt Weber Signed-off-by: Niranjan Reddy Tested-by: Bryce Ferguson Signed-off-by: Bryce Ferguson [Thomas: - Move the Config.in comment at the top of the Config.in file rather than between the main option and its sub-options, as this breaks menuconfig indentation. - Fix the propagation of the libsemanage dependencies. libsemanage depends on BR2_PACKAGE_AUDIT_ARCH_SUPPORTS and BR2_TOOLCHAIN_USES_GLIBC which were not accounted for. Since it depends on BR2_TOOLCHAIN_USES_GLIBC, then all the gettext related handling becomes useless and has been removed. - Rename the prompt of the restorecond sub-option to just "restorecond". - Use TARGET_CONFIGURE_OPTS and HOST_CONFIGURE_OPTS instead of passing LDFLAGS, CC, etc. manually. - Use make "foreach" function for loops instead of shell "for" loops. - Rework the explanation of why we're passing DESTDIR at build time. - Minor formatting tweaks here and there.] Signed-off-by: Thomas Petazzoni