From 167b0505cecd35a20c75e9a9fc33fe39c61096d9 Mon Sep 17 00:00:00 2001 From: Ondrej Mosnacek Date: Dec 15 2020 21:29:57 +0000 Subject: Remove unnecessary steps from targeted policy build We can install the permissivedomains.cil module directly, no need to copy it to %{buildroot} first. Signed-off-by: Ondrej Mosnacek --- diff --git a/selinux-policy.spec b/selinux-policy.spec index 99cb361..bc11916 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -424,14 +424,11 @@ mkdir -p %{buildroot}%{_datadir}/selinux/packages make clean %if %{BUILD_TARGETED} # Build targeted policy -# Commented out because only targeted ref policy currently builds -cp %{SOURCE28} %{buildroot}/ %makeCmds targeted mcs allow %makeModulesConf targeted base contrib %installCmds targeted mcs allow # install permissivedomains.cil -%{_sbindir}/semodule -p %{buildroot} -X 100 -s targeted -i %{buildroot}/permissivedomains.cil -rm -rf %{buildroot}/permissivedomains.cil +%{_sbindir}/semodule -p %{buildroot} -X 100 -s targeted -i %{SOURCE28} # recreate sandbox.pp rm -rf %{buildroot}%{_sharedstatedir}/selinux/targeted/active/modules/100/sandbox %make_build %common_params UNK_PERMS=allow NAME=targeted TYPE=mcs sandbox.pp