[gentoo-commits] proj/hardened-refpolicy:master commit in: /

[Jason Zaman]

commit:     451967e07ca8eb3b77e9c9cef67fa626d430e346
Author:     Christian Göttsche <cgzones <AT> googlemail <DOT> com>
AuthorDate: Mon Feb  1 19:07:40 2021 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Feb  6 20:54:11 2021 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=451967e0

Rules.monolithic: tweak checkpolicy arguments

- enable optimizations (3.0 https://github.com/SELinuxProject/selinux/commit/071247e8f4e9584095474093537f1869379ca43f)
- fail on warnings (3.1 https://github.com/SELinuxProject/selinux/commit/62a91d7d71736c67dcecff3060dd2301b6313285)
- sort ocontexts (2.9 https://github.com/SELinuxProject/selinux/commit/9077c5c056f348ab4908bdf004ca82cb1f01bd38)

Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 Rules.monolithic | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Rules.monolithic b/Rules.monolithic
index 92557529..1696021f 100644
--- a/Rules.monolithic
+++ b/Rules.monolithic
@@ -81,7 +81,7 @@ ifneq ($(pv),$(kv))
 	@echo "WARNING: Policy version mismatch (policy:$(pv) kernel:$(kv))!  Is your OUTPUT_POLICY set correctly?"
 	@echo
 endif
-	$(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) $^ -o $@
+	$(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) -S -O -E $^ -o $@
 
 ########################################
 #
@@ -95,7 +95,7 @@ ifneq ($(pv),$(kv))
 	@echo
 endif
 	@$(INSTALL) -d -m 0755 $(@D)
-	$(verbose) $(CHECKPOLICY) -U $(UNK_PERMS)  $^ -o $@
+	$(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) -S -O -E $^ -o $@
 
 ########################################
 #