Browse Source

package/iputils: add SELinux module

Support for the iputils is added by the admin/netutils module in the
SELinux refpolicy for the following tools :
 - arping
 - ping
 - tracepath
 - traceroute6

Support for rdisc is added by services/rdisc.

Support for tftpd is added by services/tftp.

Note: listing the same SELinux module multiple times is OK, as the list
of modules is eventually $(sort)ed anyway.

Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
[yann.morin.1998@free.fr: simplifications to only use positive logic]
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Maxime Chevallier 4 years ago
parent
commit
560d42efae
1 changed files with 9 additions and 0 deletions
  1. 9 0
      package/iputils/iputils.mk

+ 9 - 0
package/iputils/iputils.mk

@@ -27,6 +27,15 @@ IPUTILS_CONF_OPTS += \
 	-DBUILD_TRACEROUTE6=$(if $(BR2_PACKAGE_IPUTILS_TRACEROUTE6),true,false) \
 	-DBUILD_NINFOD=$(if $(BR2_PACKAGE_IPUTILS_NINFOD),true,false)
 
+# Selectively select the appropriate SELinux refpolicy modules
+IPUTILS_SELINUX_MODULES = \
+	$(if $(BR2_PACKAGE_IPUTILS_ARPING),netutils) \
+	$(if $(BR2_PACKAGE_IPUTILS_PING),netutils) \
+	$(if $(BR2_PACKAGE_IPUTILS_TRACEPATH),netutils) \
+	$(if $(BR2_PACKAGE_IPUTILS_TRACEROUTE6),netutils) \
+	$(if $(BR2_PACKAGE_IPUTILS_RDISC),rdisc) \
+	$(if $(BR2_PACKAGE_IPUTILS_TFTPD),tftp)
+
 #
 # arping
 #