RepoMirrors
/
selinux
mirror of https://github.com/SELinuxProject/selinux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux/libselinux/utils/Makefile

79 lines
2.6 KiB
Makefile
Raw Normal View History

initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
# Installation directories.
PREFIX ?= $(DESTDIR)/usr
LIBDIR ?= $(PREFIX)/lib
Fix BINDIR/SBINDIR/... variables in Makefiles As reported by Nicolas Iooss, there are still some inconsistencies in the definitions and usage of Makefile variables related to bin and sbin directories. Since we need to still support non-usrmerge systems, we cannot completely synchronize them, but we can eliminate unnecessary differences, remove unused variables, and drop the USRSBINDIR variables. Before: $ find . -name Makefile -exec cat {} + |grep '^[A-Z_]*BINDIR' |sort -u BINDIR=$(PREFIX)/bin BINDIR ?= $(PREFIX)/bin BINDIR ?= $(PREFIX)/sbin SBINDIR ?= $(DESTDIR)/sbin SBINDIR ?= $(PREFIX)/sbin USRSBINDIR ?= $(PREFIX)/sbin After: $ find . -name Makefile -exec cat {} + | grep '^[A-Z_]*BINDIR' | sort -u BINDIR ?= $(PREFIX)/bin SBINDIR ?= $(DESTDIR)/sbin SBINDIR ?= $(PREFIX)/sbin This does not change the actual install location of any file. It does drop the legacy symlink from /usr/sbin/load_policy to /sbin/load_policy; packagers can create that separately if desired. Reported-by: Nicolas Iooss <nicolas.iooss@m4x.org> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2017-06-20 14:49:57 +00:00
SBINDIR ?= $(PREFIX)/sbin
libselinux/utils/Makefile: Fix in tree compilation Some tools need the sepol/sepol.h header
2016-08-04 12:44:06 +00:00
INCLUDEDIR ?= $(PREFIX)/include
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
libselinux: fix subdir build and usage of cmdline CFLAGS commit 16c123f4b1f3c8d20b3f597df161d7e635620923 ("libselinux: support ANDROID_HOST=1 on Mac") broke the ability to run make in the src subdirectory of libselinux (because OS and COMPILER were not defined) and also caused some warning flags that could be overridden via command-line CFLAGS to be mandatory. Fix it. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2016-11-14 18:05:09 +00:00
OS ?= $(shell uname)
ifeq ($(shell $(CC) -v 2>&1 | grep "clang"),)
COMPILER ?= gcc
else
COMPILER ?= clang
endif
libselinux: Fix CFLAGS definition commit 16c123f4b1f3c8d20b3f597df161d7e635620923 ("libselinux: support ANDROID_HOST=1 on Mac") split up warning flags in CFLAGS based on compiler support in a manner that could lead to including a subset that is invalid, e.g. upon make DESTDIR=/path/to/dest install. Fix it. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2017-05-09 14:47:39 +00:00
ifeq ($(COMPILER), gcc)
EXTRA_CFLAGS = -fipa-pure-const -Wpacked-bitfield-compat -Wsync-nand -Wcoverage-mismatch \
-Wcpp -Wformat-contains-nul -Wnormalized=nfc -Wsuggest-attribute=const \
-Wsuggest-attribute=noreturn -Wsuggest-attribute=pure -Wtrampolines -Wjump-misses-init \
-Wno-suggest-attribute=pure -Wno-suggest-attribute=const
endif
libselinux: utils: Enable many more gcc warnings for libselinux/utils builds Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-23 15:41:21 +00:00
MAX_STACK_SIZE=8192
libselinux: Fortify source now requires all code to be compiled with -O flag Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-05-25 11:11:51 +00:00
CFLAGS ?= -O -Wall -W -Wundef -Wformat-y2k -Wformat-security -Winit-self -Wmissing-include-dirs \
libselinux: utils: Enable many more gcc warnings for libselinux/utils builds Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-23 15:41:21 +00:00
-Wunused -Wunknown-pragmas -Wstrict-aliasing -Wshadow -Wpointer-arith \
libselinux: support ANDROID_HOST=1 on Mac To build on mac, first build libsepol with no DESTDIR set. Secondly, build libselinux with ANDROID_HOST=y This configuration can be used to test the Android host build on Mac. Signed-off-by: William Roberts <william.c.roberts@intel.com>
2016-10-17 20:24:08 +00:00
-Wbad-function-cast -Wcast-align -Wwrite-strings -Waggregate-return \
libselinux: utils: Enable many more gcc warnings for libselinux/utils builds Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-23 15:41:21 +00:00
-Wstrict-prototypes -Wold-style-definition -Wmissing-prototypes \
-Wmissing-declarations -Wmissing-noreturn -Wmissing-format-attribute \
-Wredundant-decls -Wnested-externs -Winline -Winvalid-pch -Wvolatile-register-var \
libselinux: support ANDROID_HOST=1 on Mac To build on mac, first build libsepol with no DESTDIR set. Secondly, build libselinux with ANDROID_HOST=y This configuration can be used to test the Android host build on Mac. Signed-off-by: William Roberts <william.c.roberts@intel.com>
2016-10-17 20:24:08 +00:00
-Wdisabled-optimization -Wbuiltin-macro-redefined \
-Wattributes -Wmultichar \
libselinux: utils: Enable many more gcc warnings for libselinux/utils builds Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-23 15:41:21 +00:00
-Wdeprecated-declarations -Wdiv-by-zero -Wdouble-promotion -Wendif-labels -Wextra \
libselinux: support ANDROID_HOST=1 on Mac To build on mac, first build libsepol with no DESTDIR set. Secondly, build libselinux with ANDROID_HOST=y This configuration can be used to test the Android host build on Mac. Signed-off-by: William Roberts <william.c.roberts@intel.com>
2016-10-17 20:24:08 +00:00
-Wformat-extra-args -Wformat-zero-length -Wformat=2 -Wmultichar \
-Woverflow -Wpointer-to-int-cast -Wpragmas \
-Wno-missing-field-initializers -Wno-sign-compare \
libselinux: avoid redefining _FORTIFY_SOURCE Two makefiles of ours pass `-D_FORTIFY_SOURCE=2` directly to the preprocessor. While this does not pose any problems when the value has not been previously set, it can break the build if it is part of the standard build flags. The issue can easily be fixed by instead defining `_FORTIFY_SOURCE` without specifying a concrete value. In this case, gcc will not error out and simply keep using the previously defined value. On the other hand, if no value has been defined, we will now compile with `_FORTIFY_SOURCE=1`. From feature_test_macros(7): If _FORTIFY_SOURCE is set to 1, with compiler optimization level 1 (gcc -O1) and above, checks that shouldn't change the behavior of conforming programs are performed. With _FORTIFY_SOURCE set to 2, some more checking is added, but some conforming programs might fail. While this leaves us with less checks for buffer overflows, it will only enable checks that should not change behaviour of conforming programs. With _FORTIFY_SOURCE=2, the compiler may even unintentionally change behaviour of conforming programs. So in fact, one could even argue that we should only be setting the value to 1 anyway to avoid surprising side effects. So this patch changes our CFLAGS to only pass `-D_FORTIFY_SOURCE` without any concrete value, fixing the build issue. Signed-off-by: Patrick Steinhardt <ps@pks.im>
2017-06-22 09:45:57 +00:00
-Wno-format-nonliteral -Wframe-larger-than=$(MAX_STACK_SIZE) -Wp,-D_FORTIFY_SOURCE \
libselinux: utils: Enable many more gcc warnings for libselinux/utils builds Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-23 15:41:21 +00:00
-fstack-protector-all --param=ssp-buffer-size=4 -fexceptions \
-fasynchronous-unwind-tables -fdiagnostics-show-option -funit-at-a-time \
libselinux: Fix CFLAGS definition commit 16c123f4b1f3c8d20b3f597df161d7e635620923 ("libselinux: support ANDROID_HOST=1 on Mac") split up warning flags in CFLAGS based on compiler support in a manner that could lead to including a subset that is invalid, e.g. upon make DESTDIR=/path/to/dest install. Fix it. Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2017-05-09 14:47:39 +00:00
-Werror -Wno-aggregate-return -Wno-redundant-decls \
$(EXTRA_CFLAGS)
libselinux: support ANDROID_HOST=1 on Mac To build on mac, first build libsepol with no DESTDIR set. Secondly, build libselinux with ANDROID_HOST=y This configuration can be used to test the Android host build on Mac. Signed-off-by: William Roberts <william.c.roberts@intel.com>
2016-10-17 20:24:08 +00:00
LD_SONAME_FLAGS=-soname,$(LIBSO),-z,defs,-z,relro
ifeq ($(OS), Darwin)
override CFLAGS += -I/opt/local/include -I../../libsepol/include
override LDFLAGS += -L../../libsepol/src -undefined dynamic_lookup
endif
Makefiles: drop -L/-I to system paths The toolchain automatically handles them and they break cross compiling. LDFLAGS should also come before object files, some flags (eg, -Wl,as-needed) can break things if they are in the wrong place) Gentoo-Bug: https://bugs.gentoo.org/500674 Signed-off-by: Jason Zaman <jason@perfinion.com>
2017-04-24 17:59:56 +00:00
override CFLAGS += -I../include -D_GNU_SOURCE $(DISABLE_FLAGS) $(PCRE_CFLAGS)
libselinux utils: override LD{FLAGS, LIBS} for libselinux.so in Makefile the utils dir link to libselinux.so which was just built, if LDFLAGS or LDLIBS were specificed on the make commandline then the search path is not appended. Add the override directive to fix this. Gentoo-Bug: https://bugs.gentoo.org/621762 Signed-off-by: Jason Zaman <jason@perfinion.com>
2017-06-18 07:41:49 +00:00
override LDFLAGS += -L../src
override LDLIBS += -lselinux
libselinux: PCRE_LDFLAGS is actually LDLIBS >From Make's manual: LDFLAGS Extra flags to give to compilers when they are supposed to invoke the linker, ‘ld’, such as -L. Libraries (-lfoo) should be added to the LDLIBS variable instead. LDLIBS Library flags or names given to compilers when they are supposed to invoke the linker, ‘ld’. Non-library linker flags, such as -L, should go in the LDFLAGS variable. https://www.gnu.org/software/make/manual/html_node/Implicit-Variables.html Signed-off-by: Jason Zaman <jason@perfinion.com>
2017-04-24 17:59:55 +00:00
PCRE_LDLIBS ?= -lpcre
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
libselinux: add ANDROID_HOST=y build option To build the selinux host configuration, specify ANDROID_HOST=y on the Make command line. eg) make ANDROID_HOST=y
2016-09-28 16:17:59 +00:00
ifeq ($(ANDROID_HOST),y)
TARGETS=sefcontext_compile
else
sort input files when building packages (e.g. for openSUSE Linux) (random) filesystem order of input files influences ordering of functions in the output, thus without the patch, builds (in disposable VMs) would usually differ. See https://reproducible-builds.org/ for why this matters.
2017-05-30 14:21:32 +00:00
TARGETS=$(patsubst %.c,%,$(sort $(wildcard *.c)))
libselinux: add ANDROID_HOST=y build option To build the selinux host configuration, specify ANDROID_HOST=y on the Make command line. eg) make ANDROID_HOST=y
2016-09-28 16:17:59 +00:00
endif
Author: Daniel J Walsh Email: dwalsh@redhat.com Subject: We have moved matchpathcon to /sbin from /usr/sbin Date: Wed, 01 Apr 2009 10:21:53 -0400 Some init scripts wanted to use matchpathcon before /usr is mounted. Author: Chad Sellers Email: csellers@tresys.com Added matchpathcon to clean target Signed-off-by: Chad Sellers <csellers@tresys.com>
2009-05-07 20:05:05 +00:00
libselinux: PCRE_LDFLAGS is actually LDLIBS >From Make's manual: LDFLAGS Extra flags to give to compilers when they are supposed to invoke the linker, ‘ld’, such as -L. Libraries (-lfoo) should be added to the LDLIBS variable instead. LDLIBS Library flags or names given to compilers when they are supposed to invoke the linker, ‘ld’. Non-library linker flags, such as -L, should go in the LDFLAGS variable. https://www.gnu.org/software/make/manual/html_node/Implicit-Variables.html Signed-off-by: Jason Zaman <jason@perfinion.com>
2017-04-24 17:59:55 +00:00
sefcontext_compile: LDLIBS += $(PCRE_LDLIBS) ../src/libselinux.a -lsepol
libselinux: add support for pcre2 This patch moves all pcre1/2 dependencies into the new files regex.h and regex.c implementing the common denominator of features needed by libselinux. The compiler flag -DUSE_PCRE2 toggles between the used implementations. As of this patch libselinux supports either pcre or pcre2 but not both at the same time. The persistently stored file contexts information differs. This means libselinux can only load file context files generated by sefcontext_compile build with the same pcre variant. Also, for pcre2 the persistent format is architecture dependent. Stored precompiled regular expressions can only be used on the same architecture they were generated on. If pcre2 is used, sefcontext_compile now respects the "-r". This flag makes sefcontext_compile include the precompiled regular expressions in the output file. The default is to omit them, so that the output remains portable at the cost of having to recompile the regular expressions at load time, or rather on first use. Signed-off-by: Janis Danisevskis <jdanis@google.com>
2016-09-15 16:14:33 +00:00
sefcontext_compile: sefcontext_compile.o ../src/regex.o
Author: Daniel J Walsh Email: dwalsh@redhat.com Subject: We have moved matchpathcon to /sbin from /usr/sbin Date: Wed, 01 Apr 2009 10:21:53 -0400 Some init scripts wanted to use matchpathcon before /usr is mounted. Author: Chad Sellers Email: csellers@tresys.com Added matchpathcon to clean target Signed-off-by: Chad Sellers <csellers@tresys.com>
2009-05-07 20:05:05 +00:00
libselinux: utils: Stop separating out matchpathcon as something special It's not special and doesn't need its own Makefile lines. Just make it a normal target. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-27 19:41:58 +00:00
all: $(TARGETS)
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
install: all
Fix BINDIR/SBINDIR/... variables in Makefiles As reported by Nicolas Iooss, there are still some inconsistencies in the definitions and usage of Makefile variables related to bin and sbin directories. Since we need to still support non-usrmerge systems, we cannot completely synchronize them, but we can eliminate unnecessary differences, remove unused variables, and drop the USRSBINDIR variables. Before: $ find . -name Makefile -exec cat {} + |grep '^[A-Z_]*BINDIR' |sort -u BINDIR=$(PREFIX)/bin BINDIR ?= $(PREFIX)/bin BINDIR ?= $(PREFIX)/sbin SBINDIR ?= $(DESTDIR)/sbin SBINDIR ?= $(PREFIX)/sbin USRSBINDIR ?= $(PREFIX)/sbin After: $ find . -name Makefile -exec cat {} + | grep '^[A-Z_]*BINDIR' | sort -u BINDIR ?= $(PREFIX)/bin SBINDIR ?= $(DESTDIR)/sbin SBINDIR ?= $(PREFIX)/sbin This does not change the actual install location of any file. It does drop the legacy symlink from /usr/sbin/load_policy to /sbin/load_policy; packagers can create that separately if desired. Reported-by: Nicolas Iooss <nicolas.iooss@m4x.org> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2017-06-20 14:49:57 +00:00
-mkdir -p $(SBINDIR)
install -m 755 $(TARGETS) $(SBINDIR)
libselinux/utils: do not create an empty /sbin directory When building libselinux package, "make install" creates /sbin directory without putting anything in it. Remove this from the Makefile. While at it, rename USRBINDIR variable USRSBINDIR (with an S) as it refers to /usr/sbin. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
2016-12-21 21:09:51 +00:00
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
clean:
libselinux: utils: Stop separating out matchpathcon as something special It's not special and doesn't need its own Makefile lines. Just make it a normal target. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-27 19:41:58 +00:00
rm -f $(TARGETS) *.o *~
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
libselinux: Update Makefiles to handle /usrmove Move everything into /usr/* and just put links from /*. The whole /usr thing hasn't really worked in all situations for a long long time. Just accept that fact and move along. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
2012-01-27 19:00:34 +00:00
distclean: clean
initial import from svn trunk revision 2950
2008-08-19 19:30:36 +00:00
indent:
../../scripts/Lindent $(wildcard *.[ch])
relabel: