freeipa/selinux/Makefile

SUBDIRS = ipa_kpasswd ipa_httpd ipa_dogtag
POLICY_MAKEFILE = /usr/share/selinux/devel/Makefile
POLICY_DIR = $(DESTDIR)/usr/share/selinux/targeted

all:
	if [ ! -e $(POLICY_MAKEFILE) ]; then echo "You need to install the SELinux development tools (selinux-policy-devel)" && exit 1; fi

	@for subdir in $(SUBDIRS); do \
		(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) || exit 1; \
	done

clean:
	@for subdir in $(SUBDIRS); do \
		(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) || exit 1; \
	done

distclean: clean
	rm -f ipa-server-selinux.spec

maintainer-clean: distclean

install: all
	install -d $(POLICY_DIR)
	install -m 644 ipa_kpasswd/ipa_kpasswd.pp $(POLICY_DIR)
	install -m 644 ipa_httpd/ipa_httpd.pp $(POLICY_DIR)
	install -m 644 ipa_dogtag/ipa_dogtag.pp $(POLICY_DIR)

load:
	/usr/sbin/semodule -i ipa_kpasswd/ipa_kpasswd.pp ipa_httpd/ipa_httpd.pp
Add SELinux policy for CRL file publishing. This policy should really be provided by dogtag. We don't want to grant read/write access to everything dogtag can handle so we change the context to cert_t instead. But we have to let dogtag read/write that too hence this policy. To top it off we can't load this policy unless dogtag is also loaded so we insert it in the IPA installer 2009-11-25 12:42:52 -06:00			`SUBDIRS = ipa_kpasswd ipa_httpd ipa_dogtag`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 10:09:06 -06:00			`POLICY_MAKEFILE = /usr/share/selinux/devel/Makefile`
			`POLICY_DIR = $(DESTDIR)/usr/share/selinux/targeted`

			`all:`
			`if [ ! -e $(POLICY_MAKEFILE) ]; then echo "You need to install the SELinux development tools (selinux-policy-devel)" && exit 1; fi`

			`@for subdir in $(SUBDIRS); do \`
			`(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) \|\| exit 1; \`
			`done`

			`clean:`
			`@for subdir in $(SUBDIRS); do \`
			`(cd $$subdir && $(MAKE) -f $(POLICY_MAKEFILE) $@) \|\| exit 1; \`
			`done`

			`distclean: clean`
Fix versioning for configure.ac and ipa-python/setup.py Fix make maintainer-clean Also make RPM naming consistent by using a temp RELEASE file. This one helps when testing builds using rpms. Just 'echo X > RELEASE' to build a new rpms (X, X+1, X+2 ...) Version 1.1.0 was released some times ago, bump up to 1.1.1 2008-08-08 08:35:05 -05:00			`rm -f ipa-server-selinux.spec`

			`maintainer-clean: distclean`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 10:09:06 -06:00
			`install: all`
Create the selinux installation directory before installing files 2008-02-20 21:14:44 -06:00			`install -d $(POLICY_DIR)`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 10:09:06 -06:00			`install -m 644 ipa_kpasswd/ipa_kpasswd.pp $(POLICY_DIR)`
Generate CRLs and make them available from the IPA web server 2009-08-24 12:42:48 -05:00			`install -m 644 ipa_httpd/ipa_httpd.pp $(POLICY_DIR)`
Add SELinux policy for CRL file publishing. This policy should really be provided by dogtag. We don't want to grant read/write access to everything dogtag can handle so we change the context to cert_t instead. But we have to let dogtag read/write that too hence this policy. To top it off we can't load this policy unless dogtag is also loaded so we insert it in the IPA installer 2009-11-25 12:42:52 -06:00			`install -m 644 ipa_dogtag/ipa_dogtag.pp $(POLICY_DIR)`
Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 10:09:06 -06:00
			`load:`
Add SELinux policy for UI assets This also removes the Index option of /ipa-assets as well as the deprecated IPADebug option. No need to build or install ipa_webgui anymore. Leaving in the code for reference purposes for now. 2009-11-03 14:26:00 -06:00			`/usr/sbin/semodule -i ipa_kpasswd/ipa_kpasswd.pp ipa_httpd/ipa_httpd.pp`