freeipa/selinux/Makefile

SUBDIRS = ipa_httpd ipa_dogtag
POLICY_MAKEFILE = /usr/share/selinux/devel/Makefile
POLICY_DIR = $(DESTDIR)/usr/share/selinux/targeted

all:
	if [ ! -e $(POLICY_MAKEFILE) ]; then echo "You need to install the SELinux development tools (selinux-policy-devel)" && exit 1; fi

	@for subdir in $(SUBDIRS); do \
		(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) || exit 1; \
	done

clean:
	@for subdir in $(SUBDIRS); do \
		(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) || exit 1; \
	done

distclean: clean
	rm -f ipa-server-selinux.spec

maintainer-clean: distclean

install: all
	install -d $(POLICY_DIR)
	install -m 644 ipa_httpd/ipa_httpd.pp $(POLICY_DIR)
	install -m 644 ipa_dogtag/ipa_dogtag.pp $(POLICY_DIR)

load:
	/usr/sbin/semodule -i ipa_httpd/ipa_httpd.pp
daemons: Remove ipa_kpasswd Now that we have our own database we can properly enforce stricter constraints on how the db can be changed. Stop shipping our own kpasswd daemon and instead use the regular kadmin daemon. 2011-07-20 18:11:05 -04:00			`SUBDIRS = ipa_httpd ipa_dogtag`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00			`POLICY_MAKEFILE = /usr/share/selinux/devel/Makefile`
			`POLICY_DIR = $(DESTDIR)/usr/share/selinux/targeted`

			`all:`
			`if [ ! -e $(POLICY_MAKEFILE) ]; then echo "You need to install the SELinux development tools (selinux-policy-devel)" && exit 1; fi`

			`@for subdir in $(SUBDIRS); do \`
			`(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) \|\| exit 1; \`
			`done`

			`clean:`
			`@for subdir in $(SUBDIRS); do \`
			`(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) \|\| exit 1; \`
			`done`

			`distclean: clean`
Fix versioning for configure.ac and ipa-python/setup.py Fix make maintainer-clean Also make RPM naming consistent by using a temp RELEASE file. This one helps when testing builds using rpms. Just 'echo X > RELEASE' to build a new rpms (X, X+1, X+2 ...) Version 1.1.0 was released some times ago, bump up to 1.1.1 2008-08-08 09:35:05 -04:00			`rm -f ipa-server-selinux.spec`

			`maintainer-clean: distclean`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
			`install: all`
Create the selinux installation directory before installing files 2008-02-20 22:14:44 -05:00			`install -d $(POLICY_DIR)`
Generate CRLs and make them available from the IPA web server 2009-08-24 13:42:48 -04:00			`install -m 644 ipa_httpd/ipa_httpd.pp $(POLICY_DIR)`
Add SELinux policy for CRL file publishing. This policy should really be provided by dogtag. We don't want to grant read/write access to everything dogtag can handle so we change the context to cert_t instead. But we have to let dogtag read/write that too hence this policy. To top it off we can't load this policy unless dogtag is also loaded so we insert it in the IPA installer 2009-11-25 13:42:52 -05:00			`install -m 644 ipa_dogtag/ipa_dogtag.pp $(POLICY_DIR)`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
			`load:`
daemons: Remove ipa_kpasswd Now that we have our own database we can properly enforce stricter constraints on how the db can be changed. Stop shipping our own kpasswd daemon and instead use the regular kadmin daemon. 2011-07-20 18:11:05 -04:00			`/usr/sbin/semodule -i ipa_httpd/ipa_httpd.pp`