[yocto] [meta-selinux] Install policy headers and include them in the refpolicy dev package.
Philip Tricca
flihp at twobit.us
Wed Sep 18 19:13:05 PDT 2013
On 09/18/2013 09:10 PM, Philip Tricca wrote:
> On 09/17/2013 09:17 PM, Philip Tricca wrote:
>> This patch is pretty straight forward: All we do is call the
>> 'install-headers' make target at the end of do_install. We then add
>> the interface 'include' directory to the dev package. This allows
>> projects that ship their own SELinux policy (not in the refpolicy)
>> to build against the refpolicy headers / interface files by using
>> the Makefile supplied by refpolicy.
>
> Apologies, I let my MUA mangle that last patch something awful. Fixed below:
>
> Signed-off-by: Philip Tricca <flihp at twobit.us>
> ---
> recipes-security/refpolicy/refpolicy_common.inc | 6 +++++-
> 1 file changed, 5 insertions(+), 1 deletion(-)
>
> diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
> index 2c8891a..07c05aa 100644
> --- a/recipes-security/refpolicy/refpolicy_common.inc
> +++ b/recipes-security/refpolicy/refpolicy_common.inc
> @@ -12,7 +12,8 @@ SRC_URI += "file://customizable_types \
> S = "${WORKDIR}/refpolicy"
>
> FILES_${PN} = "${sysconfdir}/selinux/${POLICY_NAME}/ \
> - ${datadir}/selinux/${POLICY_NAME}/"
> + ${datadir}/selinux/${POLICY_NAME}/*.pp"
> +FILES_${PN}-dev =+ "${datadir}/selinux/${POLICY_NAME}/include/""
That last quote in the FILES_${PN}-dev line needs to go. Can resubmit if requested.
>
> DEPENDS += "checkpolicy-native policycoreutils-native m4-native"
> RDEPENDS_${PN} += "policycoreutils selinux-config"
> @@ -75,4 +76,7 @@ EOF
>
> cat ${WORKDIR}/customizable_types >> \
> ${D}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types
> +
> + # install policy headers
> + oe_runmake install-headers DESTDIR=${D}
> }
>
More information about the yocto
mailing list