From 8df65f137f025e1adaf2b89b6f3d03ad33ae4b09 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Wed, 12 Oct 2005 19:13:49 +0000 Subject: [PATCH] add sechecker targets --- refpolicy/Changelog | 1 + refpolicy/Makefile | 1 + refpolicy/Rules.monolithic | 13 ++++++++++++- 3 files changed, 14 insertions(+), 1 deletion(-) diff --git a/refpolicy/Changelog b/refpolicy/Changelog index dcda94cc1..160a73e5b 100644 --- a/refpolicy/Changelog +++ b/refpolicy/Changelog @@ -1,3 +1,4 @@ +- Add targets for sechecker. - Updated to sedoctool to read bool files and tunable files separately. - Changed the xml tag of to to be consistent diff --git a/refpolicy/Makefile b/refpolicy/Makefile index 6bcd936d5..d01f73963 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy SETFILES := $(SBINDIR)/setfiles GENHOMEDIRCON := $(SBINDIR)/genhomedircon XMLLINT := $(BINDIR)/xmllint +SECHECK := $(BINDIR)/sechecker CFLAGS := -Wall diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic index 259e287a6..830cebe79 100644 --- a/refpolicy/Rules.monolithic +++ b/refpolicy/Rules.monolithic @@ -201,6 +201,16 @@ relabel: $(FC) $(SETFILES) fi $(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS) +######################################## +# +# Run policy source checks +# +check: policy.conf $(FC) + $(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res + +longcheck: policy.conf $(FC) + $(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res + ######################################## # # Clean the sources @@ -210,5 +220,6 @@ clean: rm -f policy.conf rm -f policy.$(PV) rm -f $(FC) + rm -f *.res -.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean +.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean