[selinux-policy: 481/3172] add distro tunables. expand on a few comments
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:46:14 UTC 2010
commit 25a0c61ffc6f390c45b08cf158fa2cd2300aee3a
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Jul 13 18:08:12 2005 +0000
add distro tunables. expand on a few comments
refpolicy/Makefile | 20 +++++++++++++++++++-
1 files changed, 19 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/Makefile b/refpolicy/Makefile
index 55e1b4b..e7412a1 100644
--- a/refpolicy/Makefile
+++ b/refpolicy/Makefile
@@ -20,7 +20,10 @@
# Configurable portions of the Makefile
#
-# Override default policy version
+# Policy version
+# By default, checkpolicy will create the highest
+# version policy it supports. Setting this will
+# override the version.
#OUTPUT_POLICY = 18
# Policy Type
@@ -28,11 +31,21 @@
# strict and strict-mls are currently supported.
TYPE = strict
+# Policy Name
# If set, this will be used as the policy
# name. Otherwise the policy type will be
# used for the name.
NAME = refpolicy
+# Distribution
+# Some distributions have portions of policy
+# for programs or configurations specific to the
+# distribution. Setting this will enable options
+# for the distribution.
+# redhat, gentoo, debian, and suse are current options.
+# Fedora users should enable redhat.
+#DISTRO = redhat
+
# Build monolithic policy. Putting n here
# will build a loadable module policy.
# Only monolithic policies are currently supported.
@@ -76,6 +89,11 @@ ifneq ($(findstring targeted,$(TYPE)),)
override M4PARAM += -D targeted_policy
endif
+# enable distribution-specific policy
+ifneq ($(DISTRO),)
+ override M4PARAM += -D distro_$(DISTRO)
+endif
+
ifeq ($(MONOLITHIC),y)
override M4PARAM += -D monolithic_policy
endif
More information about the scm-commits
mailing list