Re: [meta-selinux] Install policy headers and include them in the refpolicy dev package.

[Philip Tricca <flihp@twobit.us>]

On 09/18/2013 09:10 PM, Philip Tricca wrote:
> On 09/17/2013 09:17 PM, Philip Tricca wrote:
>> This patch is pretty straight forward: All we do is call the
>> 'install-headers' make target at the end of do_install. We then add
>> the interface 'include' directory to the dev package. This allows
>> projects that ship their own SELinux policy (not in the refpolicy)
>> to build against the refpolicy headers / interface files by using
>> the Makefile supplied by refpolicy.
> 
> Apologies, I let my MUA mangle that last patch something awful. Fixed below:
> 
> Signed-off-by: Philip Tricca <flihp@twobit.us>
> ---
>  recipes-security/refpolicy/refpolicy_common.inc |    6 +++++-
>  1 file changed, 5 insertions(+), 1 deletion(-)
> 
> diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
> index 2c8891a..07c05aa 100644
> --- a/recipes-security/refpolicy/refpolicy_common.inc
> +++ b/recipes-security/refpolicy/refpolicy_common.inc
> @@ -12,7 +12,8 @@ SRC_URI += "file://customizable_types \
>  S = "${WORKDIR}/refpolicy"
>  
>  FILES_${PN} = "${sysconfdir}/selinux/${POLICY_NAME}/ \
> -	${datadir}/selinux/${POLICY_NAME}/"
> +	${datadir}/selinux/${POLICY_NAME}/*.pp"
> +FILES_${PN}-dev =+ "${datadir}/selinux/${POLICY_NAME}/include/""

That last quote in the FILES_${PN}-dev line needs to go. Can resubmit if requested.

>  
>  DEPENDS += "checkpolicy-native policycoreutils-native m4-native"
>  RDEPENDS_${PN} += "policycoreutils selinux-config"
> @@ -75,4 +76,7 @@ EOF
>  
>  	cat ${WORKDIR}/customizable_types >> \
>  		${D}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types
> +
> +	# install policy headers
> +	oe_runmake install-headers DESTDIR=${D}
>  }
>