add sechecker targets

refpolicy/Changelog

@@ -1,3 +1,4 @@
+- Add targets for sechecker.
 - Updated to sedoctool to read bool files and tunable
   files separately.
 - Changed the xml tag of <boolean> to <bool> to be consistent

refpolicy/Makefile

@@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy
 SETFILES := $(SBINDIR)/setfiles
 GENHOMEDIRCON := $(SBINDIR)/genhomedircon
 XMLLINT := $(BINDIR)/xmllint
+SECHECK := $(BINDIR)/sechecker
 
 CFLAGS := -Wall
 

refpolicy/Rules.monolithic

@@ -201,6 +201,16 @@ relabel:  $(FC) $(SETFILES)
 	fi
 	$(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
 
+########################################
+#
+# Run policy source checks
+#
+check: policy.conf $(FC)
+	$(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res
+
+longcheck: policy.conf $(FC)
+	$(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res
+
 ########################################
 #
 # Clean the sources
@@ -210,5 +220,6 @@ clean:
 	rm -f policy.conf
 	rm -f policy.$(PV)
 	rm -f $(FC)
+	rm -f *.res
 
-.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean
+.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean