123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136 |
- ################################################################################
- #
- # libselinux
- #
- ################################################################################
- LIBSELINUX_VERSION = 3.1
- LIBSELINUX_SITE = https://github.com/SELinuxProject/selinux/releases/download/20200710
- LIBSELINUX_LICENSE = Public Domain
- LIBSELINUX_LICENSE_FILES = LICENSE
- LIBSELINUX_DEPENDENCIES = $(BR2_COREUTILS_HOST_DEPENDENCY) libsepol pcre
- LIBSELINUX_INSTALL_STAGING = YES
- # Set SHLIBDIR to /usr/lib so it has the same value than LIBDIR, as a result
- # we won't have to use a relative path in 0002-revert-ln-relative.patch
- LIBSELINUX_MAKE_OPTS = \
- $(TARGET_CONFIGURE_OPTS) \
- ARCH=$(KERNEL_ARCH) \
- SHLIBDIR=/usr/lib
- LIBSELINUX_MAKE_INSTALL_TARGETS = install
- ifeq ($(BR2_TOOLCHAIN_USES_GLIBC),)
- LIBSELINUX_DEPENDENCIES += musl-fts
- LIBSELINUX_MAKE_OPTS += FTS_LDLIBS=-lfts
- endif
- ifeq ($(BR2_PACKAGE_PYTHON3),y)
- LIBSELINUX_DEPENDENCIES += python3 host-swig
- LIBSELINUX_MAKE_OPTS += \
- $(PKG_PYTHON_DISTUTILS_ENV) \
- PYTHON=python$(PYTHON3_VERSION_MAJOR)
- LIBSELINUX_MAKE_INSTALL_TARGETS += install-pywrap
- # dependencies are broken and result in file truncation errors at link
- # time if the Python bindings are built through the same make
- # invocation as the rest of the library.
- define LIBSELINUX_BUILD_PYTHON_BINDINGS
- $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
- $(LIBSELINUX_MAKE_OPTS) swigify pywrap
- endef
- endif # python3
- # Filter out D_FILE_OFFSET_BITS=64. This fixes errors caused by glibc 2.22. We
- # set CFLAGS, CPPFLAGS and LDFLAGS here because we want to win over the
- # CFLAGS/CPPFLAGS/LDFLAGS definitions passed by $(PKG_PYTHON_DISTUTILS_ENV)
- # when the python binding is enabled.
- LIBSELINUX_MAKE_OPTS += \
- CFLAGS="$(filter-out -D_FILE_OFFSET_BITS=64,$(TARGET_CFLAGS))" \
- CPPFLAGS="$(filter-out -D_FILE_OFFSET_BITS=64,$(TARGET_CPPFLAGS))" \
- LDFLAGS="$(TARGET_LDFLAGS) -lpcre -lpthread"
- define LIBSELINUX_BUILD_CMDS
- $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
- $(LIBSELINUX_MAKE_OPTS) all
- $(LIBSELINUX_BUILD_PYTHON_BINDINGS)
- endef
- define LIBSELINUX_INSTALL_STAGING_CMDS
- $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
- $(LIBSELINUX_MAKE_OPTS) DESTDIR=$(STAGING_DIR) \
- $(LIBSELINUX_MAKE_INSTALL_TARGETS)
- endef
- define LIBSELINUX_INSTALL_TARGET_CMDS
- $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
- $(LIBSELINUX_MAKE_OPTS) DESTDIR=$(TARGET_DIR) \
- $(LIBSELINUX_MAKE_INSTALL_TARGETS)
- if ! grep -q "selinuxfs" $(TARGET_DIR)/etc/fstab; then \
- echo "none /sys/fs/selinux selinuxfs noauto 0 0" >> $(TARGET_DIR)/etc/fstab ; fi
- endef
- HOST_LIBSELINUX_DEPENDENCIES = \
- host-libsepol host-pcre host-swig host-python3
- HOST_LIBSELINUX_MAKE_OPTS = \
- $(HOST_CONFIGURE_OPTS) \
- PREFIX=$(HOST_DIR) \
- SHLIBDIR=$(HOST_DIR)/lib \
- LDFLAGS="$(HOST_LDFLAGS) -lpcre -lpthread" \
- $(HOST_PKG_PYTHON_DISTUTILS_ENV) \
- PYTHON=python$(PYTHON3_VERSION_MAJOR)
- define HOST_LIBSELINUX_BUILD_CMDS
- $(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
- $(HOST_LIBSELINUX_MAKE_OPTS) all
- # Generate python interface wrapper
- $(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
- $(HOST_LIBSELINUX_MAKE_OPTS) swigify pywrap
- endef
- define HOST_LIBSELINUX_INSTALL_CMDS
- $(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
- $(HOST_LIBSELINUX_MAKE_OPTS) install
- # Install python interface wrapper
- $(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
- $(HOST_LIBSELINUX_MAKE_OPTS) install-pywrap
- endef
- define LIBSELINUX_LINUX_CONFIG_FIXUPS
- $(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT)
- $(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_SELINUX)
- $(call KCONFIG_ENABLE_OPT,CONFIG_INET)
- $(call KCONFIG_ENABLE_OPT,CONFIG_NET)
- $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY)
- $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK)
- $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX)
- $(call KCONFIG_SET_OPT,CONFIG_LSM,"selinux")
- $(if $(BR2_TARGET_ROOTFS_EROFS),
- $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_XATTR)
- $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_EXT2),
- $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_XATTR)
- $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_EXT2_3),
- $(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_EXT2_4),
- $(call KCONFIG_ENABLE_OPT,CONFIG_EXT4_FS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_F2FS),
- $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_XATTR)
- $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_JFFS2),
- $(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
- $(if $(BR2_TARGET_ROOTFS_SQUASHFS),
- $(call KCONFIG_ENABLE_OPT,CONFIG_SQUASHFS_XATTR))
- $(if $(BR2_TARGET_ROOTFS_UBIFS),
- $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_XATTR)
- $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_SECURITY))
- endef
- $(eval $(generic-package))
- $(eval $(host-generic-package))
|