libselinux.mk 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136
  1. ################################################################################
  2. #
  3. # libselinux
  4. #
  5. ################################################################################
  6. LIBSELINUX_VERSION = 3.1
  7. LIBSELINUX_SITE = https://github.com/SELinuxProject/selinux/releases/download/20200710
  8. LIBSELINUX_LICENSE = Public Domain
  9. LIBSELINUX_LICENSE_FILES = LICENSE
  10. LIBSELINUX_DEPENDENCIES = $(BR2_COREUTILS_HOST_DEPENDENCY) libsepol pcre
  11. LIBSELINUX_INSTALL_STAGING = YES
  12. # Set SHLIBDIR to /usr/lib so it has the same value than LIBDIR, as a result
  13. # we won't have to use a relative path in 0002-revert-ln-relative.patch
  14. LIBSELINUX_MAKE_OPTS = \
  15. $(TARGET_CONFIGURE_OPTS) \
  16. ARCH=$(KERNEL_ARCH) \
  17. SHLIBDIR=/usr/lib
  18. LIBSELINUX_MAKE_INSTALL_TARGETS = install
  19. ifeq ($(BR2_TOOLCHAIN_USES_GLIBC),)
  20. LIBSELINUX_DEPENDENCIES += musl-fts
  21. LIBSELINUX_MAKE_OPTS += FTS_LDLIBS=-lfts
  22. endif
  23. ifeq ($(BR2_PACKAGE_PYTHON3),y)
  24. LIBSELINUX_DEPENDENCIES += python3 host-swig
  25. LIBSELINUX_MAKE_OPTS += \
  26. $(PKG_PYTHON_DISTUTILS_ENV) \
  27. PYTHON=python$(PYTHON3_VERSION_MAJOR)
  28. LIBSELINUX_MAKE_INSTALL_TARGETS += install-pywrap
  29. # dependencies are broken and result in file truncation errors at link
  30. # time if the Python bindings are built through the same make
  31. # invocation as the rest of the library.
  32. define LIBSELINUX_BUILD_PYTHON_BINDINGS
  33. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
  34. $(LIBSELINUX_MAKE_OPTS) swigify pywrap
  35. endef
  36. endif # python3
  37. # Filter out D_FILE_OFFSET_BITS=64. This fixes errors caused by glibc 2.22. We
  38. # set CFLAGS, CPPFLAGS and LDFLAGS here because we want to win over the
  39. # CFLAGS/CPPFLAGS/LDFLAGS definitions passed by $(PKG_PYTHON_DISTUTILS_ENV)
  40. # when the python binding is enabled.
  41. LIBSELINUX_MAKE_OPTS += \
  42. CFLAGS="$(filter-out -D_FILE_OFFSET_BITS=64,$(TARGET_CFLAGS))" \
  43. CPPFLAGS="$(filter-out -D_FILE_OFFSET_BITS=64,$(TARGET_CPPFLAGS))" \
  44. LDFLAGS="$(TARGET_LDFLAGS) -lpcre -lpthread"
  45. define LIBSELINUX_BUILD_CMDS
  46. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
  47. $(LIBSELINUX_MAKE_OPTS) all
  48. $(LIBSELINUX_BUILD_PYTHON_BINDINGS)
  49. endef
  50. define LIBSELINUX_INSTALL_STAGING_CMDS
  51. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
  52. $(LIBSELINUX_MAKE_OPTS) DESTDIR=$(STAGING_DIR) \
  53. $(LIBSELINUX_MAKE_INSTALL_TARGETS)
  54. endef
  55. define LIBSELINUX_INSTALL_TARGET_CMDS
  56. $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
  57. $(LIBSELINUX_MAKE_OPTS) DESTDIR=$(TARGET_DIR) \
  58. $(LIBSELINUX_MAKE_INSTALL_TARGETS)
  59. if ! grep -q "selinuxfs" $(TARGET_DIR)/etc/fstab; then \
  60. echo "none /sys/fs/selinux selinuxfs noauto 0 0" >> $(TARGET_DIR)/etc/fstab ; fi
  61. endef
  62. HOST_LIBSELINUX_DEPENDENCIES = \
  63. host-libsepol host-pcre host-swig host-python3
  64. HOST_LIBSELINUX_MAKE_OPTS = \
  65. $(HOST_CONFIGURE_OPTS) \
  66. PREFIX=$(HOST_DIR) \
  67. SHLIBDIR=$(HOST_DIR)/lib \
  68. LDFLAGS="$(HOST_LDFLAGS) -lpcre -lpthread" \
  69. $(HOST_PKG_PYTHON_DISTUTILS_ENV) \
  70. PYTHON=python$(PYTHON3_VERSION_MAJOR)
  71. define HOST_LIBSELINUX_BUILD_CMDS
  72. $(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
  73. $(HOST_LIBSELINUX_MAKE_OPTS) all
  74. # Generate python interface wrapper
  75. $(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
  76. $(HOST_LIBSELINUX_MAKE_OPTS) swigify pywrap
  77. endef
  78. define HOST_LIBSELINUX_INSTALL_CMDS
  79. $(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
  80. $(HOST_LIBSELINUX_MAKE_OPTS) install
  81. # Install python interface wrapper
  82. $(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
  83. $(HOST_LIBSELINUX_MAKE_OPTS) install-pywrap
  84. endef
  85. define LIBSELINUX_LINUX_CONFIG_FIXUPS
  86. $(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT)
  87. $(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_SELINUX)
  88. $(call KCONFIG_ENABLE_OPT,CONFIG_INET)
  89. $(call KCONFIG_ENABLE_OPT,CONFIG_NET)
  90. $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY)
  91. $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK)
  92. $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX)
  93. $(call KCONFIG_SET_OPT,CONFIG_LSM,"selinux")
  94. $(if $(BR2_TARGET_ROOTFS_EROFS),
  95. $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_XATTR)
  96. $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_SECURITY))
  97. $(if $(BR2_TARGET_ROOTFS_EXT2),
  98. $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_XATTR)
  99. $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
  100. $(if $(BR2_TARGET_ROOTFS_EXT2_3),
  101. $(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
  102. $(if $(BR2_TARGET_ROOTFS_EXT2_4),
  103. $(call KCONFIG_ENABLE_OPT,CONFIG_EXT4_FS_SECURITY))
  104. $(if $(BR2_TARGET_ROOTFS_F2FS),
  105. $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_XATTR)
  106. $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
  107. $(if $(BR2_TARGET_ROOTFS_JFFS2),
  108. $(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
  109. $(if $(BR2_TARGET_ROOTFS_SQUASHFS),
  110. $(call KCONFIG_ENABLE_OPT,CONFIG_SQUASHFS_XATTR))
  111. $(if $(BR2_TARGET_ROOTFS_UBIFS),
  112. $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_XATTR)
  113. $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_SECURITY))
  114. endef
  115. $(eval $(generic-package))
  116. $(eval $(host-generic-package))