[gentoo-commits] proj/hardened-refpolicy:master commit in: /

[Jason Zaman]

commit:     3f7c372e6212f0ab402c6bbd833dd80d1fb50e22
Author:     Christian Göttsche <cgzones <AT> googlemail <DOT> com>
AuthorDate: Tue Mar 22 17:10:11 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Mar 31 02:40:53 2022 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3f7c372e

Rules.monolithic: add target to generate CIL policy

Add a Makefile target to generate a CIL policy, useful for debugging,
introspection or testing.

Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 Rules.monolithic | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/Rules.monolithic b/Rules.monolithic
index e369f8f3..d6d0e6f2 100644
--- a/Rules.monolithic
+++ b/Rules.monolithic
@@ -25,6 +25,7 @@ endif
 polbinpath := $(shell $(binary_policy_path))
 
 policy_conf = $(builddir)policy.conf
+policy_cil = $(builddir)policy.cil
 fc = $(builddir)file_contexts
 polver = $(builddir)policy.$(pv)
 homedir_template = $(builddir)homedir_template
@@ -83,6 +84,19 @@ ifneq ($(pv),$(kv))
 endif
 	$(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) -S -O -E $^ -o $@
 
+########################################
+#
+# Build a CIL policy locally
+#
+$(policy_cil): $(policy_conf)
+	@echo "Compiling $(NAME) $(policy_cil)"
+ifneq ($(pv),$(kv))
+	@echo
+	@echo "WARNING: Policy version mismatch (policy:$(pv) kernel:$(kv))!  Is your OUTPUT_POLICY set correctly?"
+	@echo
+endif
+	$(verbose) $(CHECKPOLICY) -C -U $(UNK_PERMS) -S -O -E $^ -o $@
+
 ########################################
 #
 # Install a binary policy
@@ -261,6 +275,7 @@ $(installdir)/seusers: $(seusers)
 clean:
 	$(verbose) rm -f $(policy_conf)
 	$(verbose) rm -f $(polver)
+	$(verbose) rm -f $(policy_cil)
 	$(verbose) rm -f $(fc)
 	$(verbose) rm -f $(homedir_template)
 	$(verbose) rm -f $(net_contexts) $(net_contexts_nft)