add seusers support

refpolicy/Changelog

@@ -1,4 +1,4 @@
-- Add users_extra support.
+- Add users_extra and seusers support.
 - Postfix fixes from Serge Hallyn.
 - Run python and shell directly to interpret scripts so policy
   sources need not be executable.

refpolicy/Makefile

@@ -212,7 +212,8 @@ endif
 
 M4SUPPORT = $(wildcard $(POLDIR)/support/*.spt $(LOCAL_POLDIR)/support/*.spt)
 
-APPCONF := config/appconfig-$(TYPE)
+APPCONF := $(ROOT)/config/appconfig-$(TYPE)
+SEUSERS := $(APPCONF)/seusers
 APPDIR := $(CONTEXTPATH)
 APPFILES := $(addprefix $(APPDIR)/,default_contexts default_type initrc_context failsafe_context userhelper_context removable_context dbus_contexts customizable_types) $(CONTEXTPATH)/files/media
 CONTEXTFILES += $(wildcard $(APPCONF)/*_context*) $(APPCONF)/media

refpolicy/Rules.modular

@@ -88,10 +88,10 @@ $(BUILDDIR)/%.pp: $(TMPDIR)/%.mod $(TMPDIR)/%.mod.fc
 #
 # Create a base module package
 #
-$(BASE_PKG): $(BASE_MOD) $(BASE_FC) $(USERS_EXTRA)
+$(BASE_PKG): $(BASE_MOD) $(BASE_FC) $(USERS_EXTRA) $(SEUSERS)
 	@echo "Creating $(NAME) base module package"
 	@test -d $(BUILDDIR) || mkdir -p $(BUILDDIR)
-	$(verbose) $(SEMOD_PKG) -o $@ -m $(BASE_MOD) -f $(BASE_FC) -u $(USERS_EXTRA)
+	$(verbose) $(SEMOD_PKG) -o $@ -m $(BASE_MOD) -f $(BASE_FC) -u $(USERS_EXTRA) -s $(SEUSERS)
 
 $(BASE_MOD): $(BASE_CONF)
 	@echo "Compiling $(NAME) base module"

refpolicy/config/appconfig-strict-mcs/seusers

@@ -0,0 +1,2 @@
+root:root:s0-s0:c0.c255
+default:user_u:s0

refpolicy/config/appconfig-strict-mls/seusers

@@ -0,0 +1,2 @@
+root:root:s0-s15:c0.c255
+default:user_u:s0

refpolicy/config/appconfig-strict/seusers

@@ -0,0 +1,2 @@
+root:root:
+default:user_u:

refpolicy/config/appconfig-targeted-mcs/seusers

@@ -0,0 +1,2 @@
+root:root:s0-s0:c0.c255
+default:user_u:s0

refpolicy/config/appconfig-targeted-mls/seusers

@@ -0,0 +1,2 @@
+root:root:s0-s15:c0.c255
+default:user_u:s0

refpolicy/config/appconfig-targeted/seusers

@@ -0,0 +1,2 @@
+root:root:
+default:user_u: