1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
#!/usr/bin/make -f
# -*- makefile -*-
#
# # Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
# The build system doesn't use CPPFLAGS, pass them to CFLAGS to enable the
# missing (hardening) flags. dpkg_buildflags is necessary because $(shell ..)
# doesn't use local environment variables. Also enable Wall and Wextra to spot
# basic irregularities.
dpkg_buildflags = DEB_BUILD_MAINT_OPTIONS=$(DEB_BUILD_MAINT_OPTIONS) dpkg-buildflags
export DEB_CFLAGS_MAINT_APPEND = $(shell $(dpkg_buildflags) --get CPPFLAGS) -Wall -Wextra
# Build newrole executable with the audit and namespace support
export LSPP_PRIV=y
%:
dh $@
override_dh_auto_install:
dh_auto_install --destdir=debian/tmp
override_dh_installinit:
dh_installinit -ppolicycoreutils --no-start --name=selinux-autorelabel
override_dh_installsystemd:
dh_installsystemd -ppolicycoreutils --no-start --no-restart-after-upgrade --name=selinux-autorelabel
# selinux-autorelabel-mark.service functionality is included in the LSB
# selinux-autorelabel script, that's why there is no conterpart in the LSB
# world
dh_installsystemd -ppolicycoreutils --no-start --no-restart-after-upgrade --name=selinux-autorelabel-mark
override_dh_installpam:
dh_installpam -pnewrole --name=newrole
dh_installpam -pnewrole --name=run_init
|
