[yocto] [meta-selinux] Install policy headers and include them in the refpolicy dev package.

Philip Tricca flihp at twobit.us
Tue Sep 17 18:17:56 PDT 2013


This patch is pretty straight forward: All we do is call the
'install-headers' make target at the end of do_install. We then add
the interface 'include' directory to the dev package. This allows
projects that ship their own SELinux policy (not in the refpolicy)
to build against the refpolicy headers / interface files by using
the Makefile supplied by refpolicy.

Signed-off-by: Philip Tricca <flihp at twobit.us>                                 
---
 recipes-security/refpolicy/refpolicy_common.inc |    6 +++++-                 
 1 file changed, 5 insertions(+), 1 deletion(-)                                
                                                                               
diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc                                               
index 2c8891a..0f9f83b 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -12,7 +12,8 @@ SRC_URI += "file://customizable_types \
 S = "${WORKDIR}/refpolicy"

 FILES_${PN} = "${sysconfdir}/selinux/${POLICY_NAME}/ \
-       ${datadir}/selinux/${POLICY_NAME}/"
+       ${datadir}/selinux/${POLICY_NAME}/*.pp"
+FILES_${PN}-dev =+ "${datadir}/selinux/${POLICY_NAME}/include/"

 DEPENDS += "checkpolicy-native policycoreutils-native m4-native"
 RDEPENDS_${PN} += "policycoreutils selinux-config"
@@ -75,4 +76,7 @@ EOF

        cat ${WORKDIR}/customizable_types >> \
                ${D}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types
+
+       # install policy headers
+       oe_runmake install-headers DESTDIR=${D}
 }
--                                                                             
1.7.10.4



More information about the yocto mailing list