%define distro redhat

%define direct_initrc y

%define monolithic n

%define polname1 targeted

%define type1 targeted-mcs

%define polname2 strict

%define type2 strict-mcs

Summary: SELinux policy configuration

Name: selinux-policy

Version: 20051019

Release: 1

License: GPL

Group: System Environment/Base

Source: refpolicy-%{version}.tar.bz2

Url: http://serefpolicy.sourceforge.net

BuildRoot: %{_tmppath}/refpolicy-buildroot

BuildArch: noarch

# FIXME Need to ensure these have correct versions

BuildRequires: checkpolicy m4 policycoreutils python make gcc

PreReq: kernel >= 2.6.4-1.300 policycoreutils >= %{POLICYCOREUTILSVER}

Obsoletes: policy 

%description

SELinux Reference Policy - modular.

%prep

%setup -q

make conf

%build

%install

%{__rm} -fR $RPM_BUILD_ROOT

make NAME=%{polname1} TYPE=%{type1} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} base.pp

make NAME=%{polname1} TYPE=%{type1} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} modules

%{__mkdir} -p $RPM_BUILD_ROOT/%{_usr}/share/selinux/%{polname1}/%{type1}

%{__cp} *.pp $RPM_BUILD_ROOT/%{_usr}/share/selinux/%{polname1}/%{type1}

%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%{polname1}/policy

%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%{polname1}/contexts/files

make NAME=%{polname1} TYPE=%{type1} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=y DESTDIR=$RPM_BUILD_ROOT install-appconfig

make NAME=%{polname1} TYPE=%{type1} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname1}/users/local.users

make NAME=%{polname1} TYPE=%{type1} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname1}/users/system.users

make NAME=%{polname2} TYPE=%{type2} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} base.pp

make NAME=%{polname2} TYPE=%{type2} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} modules

%{__mkdir} -p $RPM_BUILD_ROOT/%{_usr}/share/selinux/%{polname2}/%{type2}

%{__cp} *.pp $RPM_BUILD_ROOT/%{_usr}/share/selinux/%{polname2}/%{type2}

%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%{polname2}/policy

%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/selinux/%{polname2}/contexts/files

make NAME=%{polname2} TYPE=%{type2} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=y DESTDIR=$RPM_BUILD_ROOT install-appconfig

make NAME=%{polname2} TYPE=%{type2} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname2}/users/local.users

make NAME=%{polname2} TYPE=%{type2} DISTRO=%{distro} DIRECT_INITRC=%{direct_initrc} MONOLITHIC=%{monolithic} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname2}/users/system.users

%clean

%{__rm} -fR $RPM_BUILD_ROOT

%files

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_sysconfdir}/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/*.pp

#%ghost %config(noreplace) %{_sysconfdir}/selinux/config

%dir %{_sysconfdir}/selinux/*

%ghost %config %{_sysconfdir}/selinux/*/booleans

%dir %{_sysconfdir}/selinux/*/policy

#%ghost %config %{_sysconfdir}/selinux/*/policy/policy.*

%dir %{_sysconfdir}/selinux/*/contexts

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/customizable_types

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/dbus_contexts

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/default_contexts

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/default_type

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/failsafe_context

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/initrc_context

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/removable_context

%config(noreplace) %{_sysconfdir}/selinux/*/contexts/userhelper_context

%dir %{_sysconfdir}/selinux/*/contexts/files

#%ghost %config %{_sysconfdir}/selinux/*/contexts/files/file_contexts

#%ghost %config %{_sysconfdir}/selinux/*/contexts/files/homedir_template

#%ghost %config %{_sysconfdir}/selinux/*/contexts/files/file_contexts.homedirs

%config %{_sysconfdir}/selinux/*/contexts/files/media

%dir %{_sysconfdir}/selinux/*/users

%config %{_sysconfdir}/selinux/*/users/system.users

%config %{_sysconfdir}/selinux/*/users/local.users

#%ghost %dir %{_sysconfdir}/selinux/*/modules

%pre

%post

%package base-targeted

Summary: SELinux %{polname1} base policy

Group: System Environment/Base

Provides: selinux-policy-base

%description base-targeted

SELinux Reference policy targeted base module.

%files base-targeted

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/%{polname1}

%dir %{_usr}/share/selinux/%{polname1}/%{type1}

%config %{_usr}/share/selinux/%{polname1}/%{type1}/base.pp

%dir %{_sysconfdir}/selinux

#%ghost %config(noreplace) %{_sysconfdir}/selinux/config

%dir %{_sysconfdir}/selinux/%{polname1}

%ghost %config %{_sysconfdir}/selinux/%{polname1}/booleans

%dir %{_sysconfdir}/selinux/%{polname1}/policy

#%ghost %config %{_sysconfdir}/selinux/%{polname1}/policy/policy.*

%dir %{_sysconfdir}/selinux/%{polname1}/contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/customizable_types

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/dbus_contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/default_contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/default_type

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/failsafe_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/initrc_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/removable_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname1}/contexts/userhelper_context

%dir %{_sysconfdir}/selinux/%{polname1}/contexts/files

#%ghost %config %{_sysconfdir}/selinux/%{polname1}/contexts/files/file_contexts

#%ghost %config %{_sysconfdir}/selinux/%{polname1}/contexts/files/homedir_template

#%ghost %config %{_sysconfdir}/selinux/%{polname1}/contexts/files/file_contexts.homedirs

%config %{_sysconfdir}/selinux/%{polname1}/contexts/files/media

%dir %{_sysconfdir}/selinux/%{polname1}/users

%config %{_sysconfdir}/selinux/%{polname1}/users/system.users

%config %{_sysconfdir}/selinux/%{polname1}/users/local.users

#%ghost %dir %{_sysconfdir}/selinux/%{polname1}/modules

%post base-targeted

semodule -b /usr/share/selinux/%{polname1}/%{type1}/base.pp -s %{_sysconfdir}/selinux/%{polname1}

for file in $(ls /usr/share/selinux/%{polname1}/%{type1} | grep -v base.pp)

do semodule -i /usr/share/selinux/%{polname1}/%{type1}/$file -s %{_sysconfdir}/selinux/%{polname1}

done

%package base-strict

Summary: SELinux %{polname2} base policy

Group: System Environment/Base

Provides: selinux-policy-base

%description base-strict

SELinux Reference policy strict base module.

%files base-strict

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/%{polname2}

%dir %{_usr}/share/selinux/%{polname2}/%{type2}

%config %{_usr}/share/selinux/%{polname2}/%{type2}/base.pp

%dir %{_sysconfdir}/selinux

#%ghost %config(noreplace) %{_sysconfdir}/selinux/config

%dir %{_sysconfdir}/selinux/%{polname2}

%ghost %config %{_sysconfdir}/selinux/%{polname2}/booleans

%dir %{_sysconfdir}/selinux/%{polname2}/policy

#%ghost %config %{_sysconfdir}/selinux/%{polname2}/policy/policy.*

%dir %{_sysconfdir}/selinux/%{polname2}/contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/customizable_types

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/dbus_contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/default_contexts

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/default_type

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/failsafe_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/initrc_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/removable_context

%config(noreplace) %{_sysconfdir}/selinux/%{polname2}/contexts/userhelper_context

%dir %{_sysconfdir}/selinux/%{polname2}/contexts/files

#%ghost %config %{_sysconfdir}/selinux/%{polname2}/contexts/files/file_contexts

#%ghost %config %{_sysconfdir}/selinux/%{polname2}/contexts/files/homedir_template

#%ghost %config %{_sysconfdir}/selinux/%{polname2}/contexts/files/file_contexts.homedirs

%config %{_sysconfdir}/selinux/%{polname2}/contexts/files/media

%dir %{_sysconfdir}/selinux/%{polname2}/users

%config %{_sysconfdir}/selinux/%{polname2}/users/system.users

%config %{_sysconfdir}/selinux/%{polname2}/users/local.users

#%ghost %dir %{_sysconfdir}/selinux/%{polname2}/modules

%post base-strict

semodule -b /usr/share/selinux/%{polname2}/%{type2}/base.pp -s %{_sysconfdir}/selinux/%{polname2}

for file in $(ls /usr/share/selinux/%{polname2}/%{type2} | grep -v base.pp)

do semodule -i /usr/share/selinux/%{polname2}/%{type2}/$file -s %{_sysconfdir}/selinux/%{polname2}

done

%package apache

Summary: SELinux apache policy

Group: System Environment/Base

Requires: selinux-policy-base

%description apache

SELinux Reference policy apache module.

%files apache

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/apache.pp

%post apache

if [ -d %{_sysconfdir}/selinux/%{polname1}/modules ] ; then

semodule -n -i %{_usr}/share/selinux/%{polname1}/%{type1}/apache.pp -s %{_sysconfdir}/selinux/%{polname1}

fi

if [ -d %{_sysconfdir}/selinux/%{polname2}/modules ] ; then

semodule -i %{_usr}/share/selinux/%{polname2}/%{type2}/apache.pp -s %{_sysconfdir}/selinux/%{polname2}

fi

%preun apache

if [ -d %{_sysconfdir}/selinux/%{polname1}/modules ]

then semodule -n -r apache -s %{_sysconfdir}/selinux/%{polname1}

fi

if [ -d %{_sysconfdir}/selinux/%{polname2}/modules ]

then semodule -n -r apache -s %{_sysconfdir}/selinux/%{polname2}

fi

%package bind

Summary: SELinux bind policy

Group: System Environment/Base

%description bind

SELinux Reference policy bind module.

%files bind

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/bind.pp

%post bind

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/bind.pp

%preun bind

semodule -r bind

%package dhcp

Summary: SELinux dhcp policy

Group: System Environment/Base

%description dhcp

SELinux Reference policy dhcp module.

%files dhcp

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/dhcp.pp

%post dhcp

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/dhcp.pp

%preun dhcp

semodule -r dhcp

%package ldap

Summary: SELinux ldap policy

Group: System Environment/Base

%description ldap

SELinux Reference policy ldap module.

%files ldap

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/ldap.pp

%post ldap

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/ldap.pp

%preun ldap

semodule -r ldap

%package mailman

Summary: SELinux mailman policy

Group: System Environment/Base

%description mailman

SELinux Reference policy mailman module.

%files mailman

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/mailman.pp

%post mailman

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/mailman.pp

%preun mailman

semodule -r mailman

%package mysql

Summary: SELinux mysql policy

Group: System Environment/Base

%description mysql

SELinux Reference policy mysql module.

%files mysql

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/mysql.pp

%post mysql

semodule -i %{_usr}/share/selinux/targeted/targeted-mcsmysql.pp

%preun mysql

semodule -r mysql

%package portmap

Summary: SELinux portmap policy

Group: System Environment/Base

%description portmap

SELinux Reference policy portmap module.

%files portmap

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/portmap.pp

%post portmap

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/portmap.pp

%preun portmap

semodule -r portmap

%package postgresql

Summary: SELinux postgresql policy

Group: System Environment/Base

%description postgresql

SELinux Reference policy postgresql module.

%files postgresql

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/postgresql.pp

%post postgresql

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/postgresql.pp

%preun postgresql

semodule -r postgresql

%package samba

Summary: SELinux samba policy

Group: System Environment/Base

%description samba

SELinux Reference policy samba module.

%files samba

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/samba.pp

%post samba

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/samba.pp

%preun samba

semodule -r samba

%package snmp

Summary: SELinux snmp policy

Group: System Environment/Base

%description snmp

SELinux Reference policy snmp module.

%files snmp

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/snmp.pp

%post snmp

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/snmp.pp

%preun snmp

semodule -r snmp

%package squid

Summary: SELinux squid policy

Group: System Environment/Base

%description squid

SELinux Reference policy squid module.

%files squid

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/squid.pp

%post squid

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/squid.pp

%preun squid

semodule -r squid

%package webalizer

Summary: SELinux webalizer policy

Group: System Environment/Base

%description webalizer

SELinux Reference policy webalizer module.

%files webalizer

%defattr(-,root,root)

%dir %{_usr}/share/selinux

%dir %{_usr}/share/selinux/*

%dir %{_usr}/share/selinux/*/*

%config %{_usr}/share/selinux/*/*/webalizer.pp

%post webalizer

semodule -i %{_usr}/share/selinux/targeted/targeted-mcs/webalizer.pp

%preun webalizer

semodule -r webalizer

%changelog