[selinux-policy] Only build the sandbox.pp file for targeted

Daniel J Walsh dwalsh at fedoraproject.org
Wed Sep 25 16:53:55 UTC 2013


commit b03c8659de3b10b2a08e249a3cd81c666154c0c2
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Wed Sep 25 12:53:36 2013 -0400

    Only build the sandbox.pp file for targeted

 config.tgz               |  Bin 3264 -> 3189 bytes
 modules-mls-contrib.conf |    7 -------
 selinux-policy.spec      |    5 +++--
 3 files changed, 3 insertions(+), 9 deletions(-)
---
diff --git a/config.tgz b/config.tgz
index 8c27ac6..c4a79da 100644
Binary files a/config.tgz and b/config.tgz differ
diff --git a/modules-mls-contrib.conf b/modules-mls-contrib.conf
index 09758d1..733628e 100644
--- a/modules-mls-contrib.conf
+++ b/modules-mls-contrib.conf
@@ -1256,13 +1256,6 @@ sambagui = module
 # 
 samba = module
 
-# Layer: apps
-# Module: sandbox
-#
-# Experimental policy for running apps within a sandbox
-# 
-sandbox = module
-
 # Layer: services
 # Module: sasl
 #
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 427995a..c82dda0 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.12.1
-Release: 82%{?dist}
+Release: 82.1%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -185,7 +185,6 @@ rm -f %{buildroot}/%{_usr}/share/selinux/%1/base.pp  \
 for i in %{buildroot}/%{_usr}/share/selinux/%1/*.pp; do bzip2 -c $i > %{buildroot}/%{_sysconfdir}/selinux/%1/modules/active/modules/`basename $i`; done \
 rm -f %{buildroot}/%{_usr}/share/selinux/%1/*pp*  \
 mkdir -p %{buildroot}%{_usr}/share/selinux/packages \
-mv %{buildroot}/%{_sysconfdir}/selinux/%1/modules/active/modules/sandbox.pp %{buildroot}/usr/share/selinux/packages \
 /usr/sbin/semodule -s %1 -n -B -p %{buildroot}; \
 /usr/bin/sha512sum %{buildroot}%{_sysconfdir}/selinux/%1/policy/policy.%{POLICYVER} | cut -d' ' -f 1 > %{buildroot}%{_sysconfdir}/selinux/%1/.policy.sha512; \
 rm -rf %{buildroot}%{_sysconfdir}/selinux/%1/contexts/netfilter_contexts  \
@@ -348,6 +347,7 @@ cp %{SOURCE28} %{buildroot}/%{_usr}/share/selinux/targeted
 %makeCmds targeted mcs n allow
 %makeModulesConf targeted base contrib
 %installCmds targeted mcs n allow
+mv %{buildroot}/%{_sysconfdir}/selinux/targeted/modules/active/modules/sandbox.pp %{buildroot}/usr/share/selinux/packages
 %modulesList targeted 
 %endif
 
@@ -359,6 +359,7 @@ cp %{SOURCE28} %{buildroot}/%{_usr}/share/selinux/minimum
 %makeCmds minimum mcs n allow
 %makeModulesConf targeted base contrib
 %installCmds minimum mcs n allow
+rm -f %{buildroot}/%{_sysconfdir}/selinux/minimum/modules/active/modules/sandbox.pp
 %modulesList minimum
 %endif
 


More information about the scm-commits mailing list