189 lines
5.8 KiB
RPMSpec
189 lines
5.8 KiB
RPMSpec
Summary: SELinux binary policy manipulation library
|
|
Name: libsepol
|
|
Version: 1.5.10
|
|
Release: 1
|
|
License: GPL
|
|
Group: System Environment/Libraries
|
|
Source: http://www.nsa.gov/selinux/archives/libsepol-%{version}.tgz
|
|
Patch: libsepol-rhat.patch
|
|
Prefix: %{_prefix}
|
|
BuildRoot: %{_tmppath}/%{name}-buildroot
|
|
Provides: libsepol.so
|
|
|
|
%description
|
|
Security-enhanced Linux is a patch of the Linux® kernel and a number
|
|
of utilities with enhanced security functionality designed to add
|
|
mandatory access controls to Linux. The Security-enhanced Linux
|
|
kernel contains new architectural components originally developed to
|
|
improve the security of the Flask operating system. These
|
|
architectural components provide general support for the enforcement
|
|
of many kinds of mandatory access control policies, including those
|
|
based on the concepts of Type Enforcement®, Role-based Access
|
|
Control, and Multi-level Security.
|
|
|
|
libsepol provides an API for the manipulation of SELinux binary policies.
|
|
It is used by checkpolicy (the policy compiler) and similar tools, as well
|
|
as by programs like load_policy that need to perform specific transformations
|
|
on binary policies such as customizing policy boolean settings.
|
|
|
|
%package devel
|
|
Summary: Header files and libraries used to build policy manipulation tools
|
|
Group: Development/Libraries
|
|
Requires: libsepol = %{version}
|
|
|
|
%description devel
|
|
The sepol-devel package contains the static libraries and header files
|
|
needed for developing applications that manipulate binary policies.
|
|
|
|
%prep
|
|
%setup -q
|
|
%patch -p1 -b .rhat
|
|
|
|
%build
|
|
make CFLAGS="%{optflags}"
|
|
|
|
%install
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{_lib}
|
|
mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_includedir}
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_bindir}
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man3
|
|
mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man8
|
|
make DESTDIR="${RPM_BUILD_ROOT}" LIBDIR="${RPM_BUILD_ROOT}%{_libdir}" SHLIBDIR="${RPM_BUILD_ROOT}/%{_lib}" install
|
|
|
|
%clean
|
|
rm -rf ${RPM_BUILD_ROOT}
|
|
|
|
%post -p /sbin/ldconfig
|
|
|
|
%postun -p /sbin/ldconfig
|
|
|
|
%files devel
|
|
%defattr(-,root,root)
|
|
%{_libdir}/libsepol.a
|
|
%{_libdir}/libsepol.so
|
|
%{_includedir}/sepol/*.h
|
|
%{_mandir}/man3/*.3.gz
|
|
%{_bindir}/*
|
|
%{_mandir}/man8/*.8.gz
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
/%{_lib}/libsepol.so.1
|
|
|
|
%changelog
|
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.10-1
|
|
- Fix reset booleans warning message
|
|
- Upgrade to latest from NSA
|
|
* License changed to LGPL v2.1, see COPYING.
|
|
|
|
* Tue May 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.9-2
|
|
- Upgrade to latest from NSA
|
|
* Added sepol_genbools_policydb and sepol_genusers_policydb for
|
|
audit2why.
|
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-2
|
|
- export sepol_context_to_sid
|
|
|
|
* Mon May 16 2005 Dan Walsh <dwalsh@redhat.com> 1.5.8-1
|
|
- Upgrade to latest from NSA
|
|
* Added sepol_ prefix to Flask types to avoid
|
|
namespace collision with libselinux.
|
|
|
|
* Fri May 13 2005 Dan Walsh <dwalsh@redhat.com> 1.5.7-1
|
|
- Upgrade to latest from NSA
|
|
* Added sepol_compute_av_reason() for audit2why.
|
|
|
|
* Tue Apr 26 2005 Dan Walsh <dwalsh@redhat.com> 1.5.6-1
|
|
- Upgrade to latest from NSA
|
|
* Fixed bug in role hierarchy checker.
|
|
|
|
* Mon Apr 25 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-2
|
|
- Fixes found via intel compiler
|
|
|
|
* Thu Apr 14 2005 Dan Walsh <dwalsh@redhat.com> 1.5.5-1
|
|
- Update from NSA
|
|
|
|
* Tue Mar 29 2005 Dan Walsh <dwalsh@redhat.com> 1.5.3-1
|
|
- Update from NSA
|
|
|
|
* Thu Mar 24 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-2
|
|
- Handle booleans.local
|
|
|
|
* Thu Mar 17 2005 Dan Walsh <dwalsh@redhat.com> 1.5.2-1
|
|
- Update to latest from NSA
|
|
* Added man page for sepol_check_context.
|
|
* Added man page for sepol_genusers function.
|
|
* Merged man pages for genpolusers and chkcon from Manoj Srivastava.
|
|
|
|
* Thu Mar 10 2005 Dan Walsh <dwalsh@redhat.com> 1.4-1
|
|
- Update to latest from NSA
|
|
|
|
* Tue Mar 8 2005 Dan Walsh <dwalsh@redhat.com> 1.3.8-1
|
|
- Update to latest from NSA
|
|
* Cleaned up error handling in sepol_genusers and sepol_genbools.
|
|
|
|
* Tue Mar 1 2005 Dan Walsh <dwalsh@redhat.com> 1.3.7-1
|
|
- Update to latest from NSA
|
|
* Merged sepol_debug and fclose patch from Dan Walsh.
|
|
|
|
* Fri Feb 18 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-3
|
|
- Make sure local_files file pointer is closed
|
|
- Stop outputing error messages
|
|
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.6-1
|
|
- Update to latest from NSA
|
|
* Changed sepol_genusers to also use getline and correctly handle
|
|
EOL.
|
|
* Thu Feb 17 2005 Dan Walsh <dwalsh@redhat.com> 1.3.5-1
|
|
- Update to latest from NSA
|
|
* Merged endianness and compute_av patches from Darrel Goeddel (TCS).
|
|
* Merged range_transition support from Darrel Goeddel (TCS).
|
|
* Added sepol_genusers function.
|
|
|
|
* Thu Feb 10 2005 Dan Walsh <dwalsh@redhat.com> 1.3.2-1
|
|
- Update to latest from NSA
|
|
* Changed relabel Makefile target to use restorecon.
|
|
|
|
* Mon Feb 7 2005 Dan Walsh <dwalsh@redhat.com> 1.3.1-1
|
|
- Update to latest from NSA
|
|
* Merged enhanced MLS support from Darrel Goeddel (TCS).
|
|
|
|
* Thu Jan 20 2005 Dan Walsh <dwalsh@redhat.com> 1.2.1.1-1
|
|
- Update to latest from NSA
|
|
* Merged build fix patch from Manoj Srivastava.
|
|
|
|
* Thu Nov 4 2004 Dan Walsh <dwalsh@redhat.com> 1.2.1-1
|
|
- Update to latest from NSA
|
|
|
|
* Mon Aug 30 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-2
|
|
- Add optargs for build
|
|
|
|
* Sun Aug 22 2004 Dan Walsh <dwalsh@redhat.com> 1.1.1-1
|
|
- New version from NSA
|
|
|
|
* Fri Aug 20 2004 Colin Walters <walters@redhat.com> 1.0-2
|
|
- Apply Stephen's chkcon patch
|
|
|
|
* Thu Aug 19 2004 Colin Walters <walters@redhat.com> 1.0-1
|
|
- New upstream version
|
|
|
|
* Mon Aug 16 2004 Dan Walsh <dwalsh@redhat.com> 0.4.2-1
|
|
- Newversion from upstream implementing stringcase compare
|
|
|
|
* Fri Aug 13 2004 Bill Nottingham <notting@redhat.com> 0.4.1-2
|
|
- ldconfig tweaks
|
|
|
|
* Thu Aug 12 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
- Ignore case of true/false
|
|
|
|
* Wed Aug 11 2004 Dan Walsh <dwalsh@redhat.com> 0.4.1-1
|
|
- New version from NSA
|
|
|
|
* Tue Aug 10 2004 Dan Walsh <dwalsh@redhat.com> 0.3.1-1
|
|
- Initial version
|
|
- Created by Stephen Smalley <sds@epoch.ncsc.mil>
|
|
|
|
|