Merge branch 'packaging' into 'master'

[libselinux] RPM packaging and adjustments. Fixes JB#43160

See merge request mer-core/libselinux!1

rpm/libselinux.spec

@@ -0,0 +1,238 @@
+# based on work by The Fedora Project (2017)
+# Copyright (c) 1998, 1999, 2000 Thai Open Source Software Center Ltd
+# 
+# Permission is hereby granted, free of charge, to any person obtaining
+# a copy of this software and associated documentation files (the
+# "Software"), to deal in the Software without restriction, including
+# without limitation the rights to use, copy, modify, merge, publish,
+# distribute, sublicense, and/or sell copies of the Software, and to
+# permit persons to whom the Software is furnished to do so, subject to
+# the following conditions:
+# 
+# The above copyright notice and this permission notice shall be included
+# in all copies or substantial portions of the Software.
+# 
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+%define libsepolver 2.8
+
+%if ! %{defined python3_sitearch}
+%define python3_sitearch /%{_libdir}/python3.?/site-packages
+%endif
+
+Summary: SELinux library and simple utilities
+Name: libselinux
+Version: 2.8
+Release: 1
+License: Public Domain
+Group: System Environment/Libraries
+# https://github.com/SELinuxProject/selinux/wiki/Releases
+Source: %{name}-%{version}.tar.bz2
+Url: https://github.com/SELinuxProject/selinux/wiki
+Patch1: ln_old_coreutils_libselinux.patch
+BuildRequires: libsepol-static >= %{libsepolver}
+BuildRequires: pcre-devel
+BuildRequires: python
+BuildRequires: python-devel
+BuildRequires: python3-base
+BuildRequires: python3-devel
+BuildRequires: systemd
+BuildRequires: swig
+BuildRequires: xz-devel
+Requires: libsepol >= %{libsepolver}
+
+%description
+Security-enhanced Linux is a feature of the Linux® kernel and a number
+of utilities with enhanced security functionality designed to add
+mandatory access controls to Linux.  The Security-enhanced Linux
+kernel contains new architectural components originally developed to
+improve the security of the Flask operating system. These
+architectural components provide general support for the enforcement
+of many kinds of mandatory access control policies, including those
+based on the concepts of Type Enforcement®, Role-based Access
+Control, and Multi-level Security.
+
+libselinux provides an API for SELinux applications to get and set
+process and file security contexts and to obtain security policy
+decisions.  Required for any applications that use the SELinux API.
+
+%package utils
+Summary: SELinux libselinux utilies
+Group: Development/Libraries
+Requires: %{name} = %{version}-%{release}
+
+%description utils
+The libselinux-utils package contains the utilities
+
+%package utils-extra
+Summary: SELinux libselinux extra utilies
+Group: Development/Libraries
+Requires: %{name} = %{version}-%{release}
+
+%description utils-extra
+The libselinux-utils-extra package contains the extra utilities
+
+%package -n python3-libselinux
+Summary: SELinux python 3 bindings for libselinux
+Group: Development/Libraries
+Requires: %{name} = %{version}-%{release}
+Provides: %{name}-python3 = %{version}-%{release}
+Provides: %{name}-python3 = %{version}-%{release}
+
+%description -n python3-libselinux
+The libselinux-python3 package contains python 3 bindings for developing
+SELinux applications. 
+
+%package devel
+Summary: Header files and libraries used to build SELinux
+Group: Development/Libraries
+Requires: %{name} = %{version}-%{release}
+Requires: libsepol-devel >= %{libsepolver}
+
+%description devel
+The libselinux-devel package contains the libraries and header files
+needed for developing SELinux applications. 
+
+%package static
+Summary: Static libraries used to build SELinux
+Group: Development/Libraries
+Requires: %{name}-devel = %{version}-%{release}
+
+%description static
+The libselinux-static package contains the static libraries
+needed for developing SELinux applications. 
+
+%prep
+%setup -q -n %{name}-%{version}/upstream
+%patch1 -p1
+
+%build
+# only build libsepol
+cd %{name}
+export LDFLAGS="%{?__global_ldflags}"
+export DISABLE_RPM="y"
+export USE_PCRE2="n"
+
+# To support building the Python wrapper against multiple Python runtimes
+# Define a function, for how to perform a "build" of the python wrapper against
+# a specific runtime:
+BuildPythonWrapper() {
+  BinaryName=$1
+
+  # Perform the build from the upstream Makefile:
+  make \
+    PYTHON=$BinaryName \
+    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
+    pywrap
+}
+
+make clean
+make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} swigify
+make LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} all
+
+BuildPythonWrapper %{__python3}
+
+make SHLIBDIR="%{_libdir}" LIBDIR="%{_libdir}" LIBSEPOLA="%{_libdir}/libsepol.a" CFLAGS="-g %{optflags}" %{?_smp_mflags}
+
+%install
+InstallPythonWrapper() {
+  BinaryName=$1
+
+  make \
+    PYTHON=$BinaryName \
+    LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" %{?_smp_mflags} \
+    LIBSEPOLA="%{_libdir}/libsepol.a" \
+    pywrap
+
+  make \
+    PYTHON=$BinaryName \
+    DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" \
+    SHLIBDIR="%{buildroot}/%{_libdir}" BINDIR="%{buildroot}%{_bindir}" \
+    SBINDIR="%{buildroot}%{_sbindir}" \
+    LIBSEPOLA="%{_libdir}/libsepol.a" \
+    install-pywrap
+}
+
+# only install libselinux
+cd %{name}
+rm -rf %{buildroot}
+mkdir -p %{buildroot}%{_tmpfilesdir}
+mkdir -p %{buildroot}%{_libdir}
+mkdir -p %{buildroot}%{_includedir}
+mkdir -p %{buildroot}%{_sbindir}
+install -d -m 0755 %{buildroot}%{_rundir}/setrans
+echo "d %{_rundir}/setrans 0755 root root" > %{buildroot}%{_tmpfilesdir}/libselinux.conf
+
+InstallPythonWrapper %{__python3}
+
+make DESTDIR="%{buildroot}" LIBDIR="%{_libdir}" SHLIBDIR="%{_libdir}" BINDIR="%{_bindir}" SBINDIR="%{_sbindir}" install
+
+mv %{buildroot}%{_sbindir}/getdefaultcon %{buildroot}%{_sbindir}/selinuxdefcon
+mv %{buildroot}%{_sbindir}/getconlist %{buildroot}%{_sbindir}/selinuxconlist
+install -d %{buildroot}%{_mandir}/man8/
+
+#%ldconfig_scriptlets
+%post
+/sbin/ldconfig
+
+%postun -p /sbin/ldconfig
+
+%files
+%defattr(-,root,root,-)
+%doc %{name}/LICENSE
+%{_libdir}/libselinux.so.*
+%dir %{_rundir}/setrans/
+%{_tmpfilesdir}/libselinux.conf
+
+%files utils
+%defattr(-,root,root,-)
+%{_sbindir}/avcstat
+%{_sbindir}/getenforce
+%{_sbindir}/getsebool
+%{_sbindir}/matchpathcon
+%{_sbindir}/sefcontext_compile
+%{_sbindir}/selinuxconlist
+%{_sbindir}/selinuxdefcon
+%{_sbindir}/selinuxexeccon
+%{_sbindir}/selinuxenabled
+%{_sbindir}/setenforce
+%{_sbindir}/selabel_digest
+%{_sbindir}/selabel_lookup
+%{_sbindir}/selabel_lookup_best_match
+%{_sbindir}/selabel_partial_match
+%{_sbindir}/selinux_check_access
+
+%files utils-extra
+%defattr(-,root,root,-)
+%{_sbindir}/compute_*
+%{_sbindir}/getfilecon
+%{_sbindir}/getpidcon
+%{_sbindir}/policyvers
+%{_sbindir}/setfilecon
+%{_sbindir}/getseuser
+%{_sbindir}/togglesebool
+%{_sbindir}/selinux_check_securetty_context
+
+%files devel
+%defattr(-,root,root,-)
+%{_libdir}/libselinux.so
+%{_libdir}/pkgconfig/libselinux.pc
+%{_includedir}/selinux/
+%{_mandir}/man3/*
+%{_mandir}/man5/*
+%{_mandir}/man8/*
+
+%files static
+%defattr(-,root,root,-)
+%{_libdir}/libselinux.a
+
+%files -n python3-libselinux
+%defattr(-,root,root,-)
+%{python3_sitearch}/selinux/
+%{python3_sitearch}/_selinux.*.so

rpm/ln_old_coreutils_libselinux.patch

@@ -0,0 +1,14 @@
+diff --git a/libselinux/src/Makefile b/libselinux/src/Makefile
+index 977b5c8..5da105b 100644
+--- a/libselinux/src/Makefile
++++ b/libselinux/src/Makefile
+@@ -190,7 +190,8 @@ install: all
+ 	install -m 755 $(LIBSO) $(DESTDIR)$(SHLIBDIR)
+ 	test -d $(DESTDIR)$(LIBDIR)/pkgconfig || install -m 755 -d $(DESTDIR)$(LIBDIR)/pkgconfig
+ 	install -m 644 $(LIBPC) $(DESTDIR)$(LIBDIR)/pkgconfig
+-	ln -sf --relative $(DESTDIR)$(SHLIBDIR)/$(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET)
++	# Since --relative is not present in ln provided by our coreutils use lib.so directly in ln
++	ln -sf $(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET)
+
+ install-pywrap: pywrap
+ 	test -d $(DESTDIR)$(PYTHONLIBDIR)/selinux || install -m 755 -d $(DESTDIR)$(PYTHONLIBDIR)/selinux