diff options
Diffstat (limited to 'PKGBUILD')
| -rw-r--r-- | PKGBUILD | 106 |
1 files changed, 20 insertions, 86 deletions
@@ -3,107 +3,40 @@ # Contributor: Simon Peter Nicholls (simon <at> mintsource <dot> org) pkgname=selinux-refpolicy-arch -_origname=refpolicy +_reponame=selinux-policy-arch _policyname=refpolicy-arch -_origver=20151208 -_patchver=1 -pkgver=${_origver}.${_patchver} +pkgver=20170805 pkgrel=1 -pkgdesc="Modular SELinux reference policy including headers and docs with Arch Linux patch" +pkgdesc="Modular SELinux reference policy including headers and docs with Arch Linux patches" arch=('any') -url="http://oss.tresys.com/projects/refpolicy" -license=('GPL') +url="https://github.com/TresysTechnology/refpolicy/wiki" +license=('GPL2') groups=('selinux') -makedepends=('checkpolicy>=2.1.8' 'policycoreutils>=2.1.10' - 'libsepol>=2.1.4' 'libsemanage>=2.0.29') +makedepends=('git' 'python' 'checkpolicy>=2.7' 'semodule-utils') +depends=('policycoreutils>=2.7') optdepends=('linux-hardened: Linux kernel with SELinux support' 'linux-selinux: Linux kernel with SELinux support') -backup=(etc/selinux/config) -install=${pkgname}.install -source=("https://raw.githubusercontent.com/wiki/TresysTechnology/${_origname}/files/${_origname}-2.${_origver}.tar.bz2" - 'config' - '0001-Label-Xorg-server-binary-correctly-on-Arch-Linux.patch' - '0002-Label-OpenSSH-files-correctly-on-Arch-Linux.patch' - '0003-Label-OpenSSH-systemd-unit-files.patch' - '0004-Label-some-user-session-DBus-services-as-bin_t.patch' - '0005-Allow-umount-to-atomically-write-run-mount-utab.patch' - '0006-Allow-the-kernel-to-unlink-block-devices.patch' - '0007-Label-gedit-plugins-properly-on-Arch-Linux.patch' - '0008-Add-file-contexts-for-usr-bin-lib-sbin-when-they-exi.patch' - '0009-Add-file-context-substitutions-for-systemd.patch' - '0010-Rename-sbin-and-usr-sbin-directories-usr-s-bin.patch' - '0011-Rename-usr-sbin-to-usr-s-bin-in-contrib-modules.patch' - '0012-Customize-build.conf-for-Arch-Linux.patch' - '0013-Allow-using-sys-fs-cgroup-symlinks.patch' - '0014-Label-some-unit-files-in-contrib-modules.patch' - '0015-Add-an-interface-for-systemd-daemons-to-configure-lo.patch' - '0016-Add-systemd-backlight-policy.patch' - '0017-Add-systemd-binfmt-policy.patch' - '0018-Make-fs_register_binary_executable_type-interface-al.patch' - '0019-systemd-timedated-and-systemd-timesyncd-policies.patch' - '0020-Add-systemd-modules-load-policy.patch' - '0021-Add-systemd-rfkill-policy.patch') -sha256sums=('2dd2f45a7132137afe8302805c3b7839739759b9ab73dd1815c01afe34ac99de' - 'c9f7cce9a06fd0595b3dd47d4fdde9d9c7457120c42c5f08bfdc5e89eb9a61df' - '42ac70848ec45b62b77d30e5e8fc2ecda0fd66eda6adc96fccac1811440313a0' - '50774986baaf6d72587493039dc0be1e1a6ec755eec898a2839efc9a26eef56d' - '25cd3fa8d5a587d9fecb68d4a0a7c57f8739cfffab164742f6568aca61b0f18b' - 'cfd1ea48eb4a5502f3fda4b9c2603d579c35861798f5ec4c7582ff99a183ee0a' - '2dad570f1865cc6e398b3319f0aa8e1765b93aad7d1a72a68c81a9a7b5a27c36' - '86827b6c9916a790adbb4f0e282fb823290383ee574b51c829ee939d7c522b4c' - 'f6604f6b279696b1b2b30a7c88c64e4157d1edbfba8080e9e05a3a8347d6e39e' - '5a46e3630682103732ca80e209d17ff0478a5efac81a8810d613b3f776b26352' - 'a840b268fd553f85d41298533baf172eec5f02b9f8982cd93193254f02c6d193' - 'f498868b632b1365f4f452ffab1926baccf137374e7ab3cd9c21505ca3b142c3' - '40add7951e84ba495675f9352910d9d91c1841658921e7612b4e9c47610bb607' - '607429a755fc96caea339ace1cbb7d53f5b92c8566804e9aa15c2fdaff5f151c' - '09b964994abb65fa5c0ed1b808140f0cfa34a0edbdfa1771382ad0481c289fe6' - 'ba75167fff469b3201d158472d54429eda9f41fea5f9029e17391490440d4a72' - 'c7e35752d9fb9dd9aa4cab52d4b96b136ae18dd52dbd730463fa28b823c95e5a' - '4bd221782f657dcab738c62a80f84b6f601529a27f0c7f0755a2be3fef1291d4' - 'cfbd157f8da48cd125611a02cfa83b2912c20533fadf18db524171c13b799625' - 'd5395e3cde509e61d0e2115e6acc47c4f2597f0a1949e2912a1ae50d4c850188' - 'c71b3a428e06666a46b22b593ee6c16bfdbb2bcb29497985d9664f6a75231360' - 'e33cec9111703ba74796da99ecaa39b105b23421ebf575c849cca661bc91dc5f' - '9164b14104855303387b645c18ba55f2c8c57cecc2907f7d6a91511a6fbabcf4') +install="${pkgname}.install" +_commit=9dd88a228bef79323378b7d8a614bd10ce60515b +source=("git+https://github.com/archlinuxhardened/${_reponame}#commit=${_commit}" + 'config') +sha256sums=('SKIP' + 'c9f7cce9a06fd0595b3dd47d4fdde9d9c7457120c42c5f08bfdc5e89eb9a61df') prepare() { - cd "${srcdir}/${_origname}" - - # Apply Arch Linux patches - patch -Np1 -i '../0001-Label-Xorg-server-binary-correctly-on-Arch-Linux.patch' - patch -Np1 -i '../0002-Label-OpenSSH-files-correctly-on-Arch-Linux.patch' - patch -Np1 -i '../0003-Label-OpenSSH-systemd-unit-files.patch' - patch -Np1 -i '../0004-Label-some-user-session-DBus-services-as-bin_t.patch' - patch -Np1 -i '../0005-Allow-umount-to-atomically-write-run-mount-utab.patch' - patch -Np1 -i '../0006-Allow-the-kernel-to-unlink-block-devices.patch' - patch -Np1 -i '../0007-Label-gedit-plugins-properly-on-Arch-Linux.patch' - patch -Np1 -i '../0008-Add-file-contexts-for-usr-bin-lib-sbin-when-they-exi.patch' - patch -Np1 -i '../0009-Add-file-context-substitutions-for-systemd.patch' - patch -Np1 -i '../0010-Rename-sbin-and-usr-sbin-directories-usr-s-bin.patch' - patch -Np1 -i '../0011-Rename-usr-sbin-to-usr-s-bin-in-contrib-modules.patch' - patch -Np1 -i '../0012-Customize-build.conf-for-Arch-Linux.patch' - patch -Np1 -i '../0013-Allow-using-sys-fs-cgroup-symlinks.patch' - patch -Np1 -i '../0014-Label-some-unit-files-in-contrib-modules.patch' - patch -Np1 -i '../0015-Add-an-interface-for-systemd-daemons-to-configure-lo.patch' - patch -Np1 -i '../0016-Add-systemd-backlight-policy.patch' - patch -Np1 -i '../0017-Add-systemd-binfmt-policy.patch' - patch -Np1 -i '../0018-Make-fs_register_binary_executable_type-interface-al.patch' - patch -Np1 -i '../0019-systemd-timedated-and-systemd-timesyncd-policies.patch' - patch -Np1 -i '../0020-Add-systemd-modules-load-policy.patch' - patch -Np1 -i '../0021-Add-systemd-rfkill-policy.patch' + cd "${srcdir}/${_reponame}" make bare make conf } build() { - cd "${srcdir}/${_origname}" + cd "${srcdir}/${_reponame}" make } -package(){ - cd "${srcdir}/${_origname}" +package() { + cd "${srcdir}/${_reponame}" make DESTDIR="${pkgdir}" install make DESTDIR="${pkgdir}" install-headers make DESTDIR="${pkgdir}" PKGNAME="${_policyname}" install-docs @@ -112,6 +45,7 @@ package(){ # which is done via install script. install -d -m0755 "${pkgdir}/var/lib/selinux" - # Install main SELinux config file defaulting to refpolicy - install -m644 -D "${srcdir}/config" "${pkgdir}/etc/selinux/config" + # Install main SELinux config file besides /etc/selinux/config. + # The install script will create a symlink. + install -m644 -D "${srcdir}/config" "${pkgdir}/etc/selinux/config.${_policyname}" } |