[selinux-policy: 481/3172] add distro tunables. expand on a few comments

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:46:14 UTC 2010


commit 25a0c61ffc6f390c45b08cf158fa2cd2300aee3a
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Wed Jul 13 18:08:12 2005 +0000

    add distro tunables.  expand on a few comments

 refpolicy/Makefile |   20 +++++++++++++++++++-
 1 files changed, 19 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/Makefile b/refpolicy/Makefile
index 55e1b4b..e7412a1 100644
--- a/refpolicy/Makefile
+++ b/refpolicy/Makefile
@@ -20,7 +20,10 @@
 # Configurable portions of the Makefile
 #
 
-# Override default policy version
+# Policy version
+# By default, checkpolicy will create the highest
+# version policy it supports.  Setting this will
+# override the version.
 #OUTPUT_POLICY = 18
 
 # Policy Type
@@ -28,11 +31,21 @@
 # strict and strict-mls are currently supported.
 TYPE = strict
 
+# Policy Name
 # If set, this will be used as the policy
 # name.  Otherwise the policy type will be
 # used for the name.
 NAME = refpolicy
 
+# Distribution
+# Some distributions have portions of policy
+# for programs or configurations specific to the
+# distribution.  Setting this will enable options
+# for the distribution.
+# redhat, gentoo, debian, and suse are current options.
+# Fedora users should enable redhat.
+#DISTRO = redhat
+
 # Build monolithic policy.  Putting n here
 # will build a loadable module policy.
 # Only monolithic policies are currently supported.
@@ -76,6 +89,11 @@ ifneq ($(findstring targeted,$(TYPE)),)
 	override M4PARAM += -D targeted_policy
 endif
 
+# enable distribution-specific policy
+ifneq ($(DISTRO),)
+	override M4PARAM += -D distro_$(DISTRO)
+endif
+
 ifeq ($(MONOLITHIC),y)
 	override M4PARAM += -D monolithic_policy
 endif


More information about the scm-commits mailing list