1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
From f03fd7bac9ba8be3d74861cb0693461df409272f Mon Sep 17 00:00:00 2001
From: Toria <ninetailedtori@uwu.gal>
Date: Sat, 28 Mar 2026 20:51:34 +0000
Subject: [PATCH] Push initial arch-compat commit.
Signed-off-by: Toria <ninetailedtori@uwu.gal>
---
.github/workflows/build-policy.yml | 15 +++++++++------
.github/workflows/diff-policy.yml | 15 +++++++++------
.github/workflows/validate-policy.yml | 15 +++++++++------
build.conf | 8 ++++----
4 files changed, 31 insertions(+), 22 deletions(-)
diff --git a/.github/workflows/build-policy.yml b/.github/workflows/build-policy.yml
index 5def3acfa..bf7ca1cb4 100644
--- a/.github/workflows/build-policy.yml
+++ b/.github/workflows/build-policy.yml
@@ -37,12 +37,15 @@ jobs:
direct_initrc: ["y", "n"]
apps-off: ["unconfined", ""]
exclude:
- - { distro: "redhat", systemd: "n" }
- - { distro: "redhat", direct_initrc: "y" }
- - { distro: "debian", systemd: "n" }
- - { distro: "debian", direct_initrc: "y" }
- - { type: "mls", apps-off: "" }
- - { systemd: "y", direct_initrc: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
steps:
- name: Checkout refpolicy sources
diff --git a/.github/workflows/diff-policy.yml b/.github/workflows/diff-policy.yml
index 26929d984..84e640a4c 100644
--- a/.github/workflows/diff-policy.yml
+++ b/.github/workflows/diff-policy.yml
@@ -29,12 +29,15 @@ jobs:
direct_initrc: ["y", "n"]
apps-off: ["unconfined", ""]
exclude:
- - { distro: "redhat", systemd: "n" }
- - { distro: "redhat", direct_initrc: "y" }
- - { distro: "debian", systemd: "n" }
- - { distro: "debian", direct_initrc: "y" }
- - { type: "mls", apps-off: "" }
- - { systemd: "y", direct_initrc: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
# above here, the matrix must be the same as in build-policy.yml.
# below here, remove duplicate analyses
- { monolithic: "n" }
diff --git a/.github/workflows/validate-policy.yml b/.github/workflows/validate-policy.yml
index 946a2f996..2f082b20e 100644
--- a/.github/workflows/validate-policy.yml
+++ b/.github/workflows/validate-policy.yml
@@ -21,12 +21,15 @@ jobs:
direct_initrc: ["y", "n"]
apps-off: ["unconfined", ""]
exclude:
- - { distro: "redhat", systemd: "n" }
- - { distro: "redhat", direct_initrc: "y" }
- - { distro: "debian", systemd: "n" }
- - { distro: "debian", direct_initrc: "y" }
- - { type: "mls", apps-off: "" }
- - { systemd: "y", direct_initrc: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "standard", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mcs", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "n" systemd: "y" }
+ - { type: "mls", distro: "arch", monolithic: "y" systemd: "y", apps-off: "unconfined" }
# above here, the matrix must be the same as in build-policy.yml.
# below here, remove duplicate analyses
- { monolithic: "n" }
diff --git a/build.conf b/build.conf
index bb282d7e0..62b36e99c 100644
--- a/build.conf
+++ b/build.conf
@@ -25,7 +25,7 @@ TYPE = standard
# If set, this will be used as the policy
# name. Otherwise the policy type will be
# used for the name.
-NAME = refpolicy
+NAME = refpolicy-arch
# Distribution
# Some distributions have portions of policy
@@ -34,7 +34,7 @@ NAME = refpolicy
# for the distribution.
# redhat, gentoo, debian, suse, and rhel4 are current options.
# Fedora users should enable redhat.
-#DISTRO = redhat
+DISTRO = arch
# Unknown Permissions Handling
# The behavior for handling permissions defined in the
@@ -53,7 +53,7 @@ DIRECT_INITRC = n
# Systemd
# Setting this will configure systemd as the init system.
-SYSTEMD = n
+SYSTEMD = y
# Build monolithic policy. Putting y here
# will build a monolithic policy.
@@ -61,7 +61,7 @@ MONOLITHIC = n
# User-based access control (UBAC)
# Enable UBAC for role separations.
-UBAC = y
+UBAC = n
# Custom build options. This field enables custom
# build options. Putting foo here will enable
--
2.53.0
|