feat: add secilc

Also add libsepol used by secilc

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>

.github/renovate.json

@@ -37,6 +37,7 @@
  "mirror/ncurses",
  "PCRE2Project/pcre2",
  "plougher/squashfs-tools",
+ "https://github.com/SELinuxProject/selinux.git",
  "git://git.savannah.gnu.org/make.git",
  "git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git",
  "git://git.savannah.gnu.org/automake.git",

Pkgfile

@@ -178,6 +178,11 @@ vars:
  libnl_sha256: 9fe43ccbeeea72c653bdcf8c93332583135cda46a79507bfd0a483bb57f65939
  libnl_sha512: 80fbbc079299c90afd2a5eda62e4d4f98bf4ef23958c3ce5101f4ed4d81d783af733213bb3bab15f218555d8460bc2394898f909f4ac024fc27281faec86a041
 
+ # renovate: datasource=git-tags depName=SELinuxProject/selinux
+ libsepol_version: 3.7
+ libsepol_sha256: cd741e25244e7ef6cd934d633614131a266c3eaeab33d8bfa45e8a93b45cc901
+ libsepol_sha512: 85d12d0ba5a7a3225f08d041a18fd59641608db5e0a78a1e9649754e45be54a807cd422d4889b88da6e806b4af546336c7a0913448f08ac33dc6ffb983890ef8
+
  # renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=https://gitlab.com/gnutls/libtasn1.git
  libtasn1_version: 4.19.0
  libtasn1_sha256: 1613f0ac1cf484d6ec0ce3b8c06d56263cc7242f1c23b30d82d23de345a63f7a
@@ -299,6 +304,11 @@ vars:
  rhash_sha256: 8e7d1a8ccac0143c8fe9b68ebac67d485df119ea17a613f4038cda52f84ef52a
  rhash_sha512: 00a7e5e058b53ce20ae79509815452ed9cb699d1322b678220b72c61dea3ea2f8fa131acfade8bb6d9f6af913f0c3c472330841181b22314b8755166310c946f
 
+ # renovate: datasource=git-tags depName=SELinuxProject/selinux
+ secilc_version: 3.7
+ secilc_sha256: 0802e920b779e9e915bb7e68ee22e995f99776554cfcdf9a2af6cb7c3b9873dc
+ secilc_sha512: 1f6061587242b63583370e04cc113b4884060c6071774b90908655df17ddc702187960d1f5b1ed53de9eb6ebd7f0029160e58d8c5f0c1126464bf6222f6f7d3e
+
  # renovate: datasource=git-tags extractVersion=^v(?<version>.*)$ depName=git://git.savannah.gnu.org/sed.git
  sed_version: 4.9
  sed_sha256: 6e226b732e1cd739464ad6862bd1a1aba42d7982922da7a53519631d24975181

libsepol/patches/busybox-ln.patch

@@ -0,0 +1,13 @@
+diff --git a/src/Makefile b/src/Makefile
+index 7b0e8446..440913ba 100644
+--- a/src/Makefile
++++ b/src/Makefile
+@@ -91,7 +91,7 @@ install: all
+ install -m 755 $(LIBSO) $(DESTDIR)$(SHLIBDIR)
+ test -d $(DESTDIR)$(LIBDIR)/pkgconfig || install -m 755 -d $(DESTDIR)$(LIBDIR)/pkgconfig
+ install -m 644 $(LIBPC) $(DESTDIR)$(LIBDIR)/pkgconfig
+- $(LN) -sf --relative $(DESTDIR)$(SHLIBDIR)/$(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET)
++ $(LN) -sf $(DESTDIR)$(SHLIBDIR)/$(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET)
+
+ relabel:
+ /sbin/restorecon $(DESTDIR)$(SHLIBDIR)/$(LIBSO)

libsepol/pkg.yaml

@@ -0,0 +1,25 @@
+name: libsepol
+dependencies:
+ - stage: base
+ - stage: patch
+ - stage: flex
+ - stage: m4
+steps:
+ - sources:
+ - url: https://github.com/SELinuxProject/selinux/releases/download/{{ .libsepol_version }}/libsepol-{{ .libsepol_version }}.tar.gz
+ destination: libsepol.tar.gz
+ sha256: "{{ .libsepol_sha256 }}"
+ sha512: "{{ .libsepol_sha512 }}"
+ prepare:
+ - |
+ tar -xzf libsepol.tar.gz --strip-components=1
+ patch -p1 < /pkg/patches/busybox-ln.patch
+ build:
+ - |
+ make -j $(nproc)
+ install:
+ - |
+ make install DESTDIR=/rootfs PREFIX=/toolchain
+finalize:
+ - from: /rootfs
+ to: /

secilc/patches/disable-manpages.patch

@@ -0,0 +1,30 @@
+diff --git a/Makefile b/Makefile
+index ef7bc8cd..db1fc6c2 100644
+--- a/Makefile
++++ b/Makefile
+@@ -28,7 +28,7 @@ CFLAGS ?= -Wall -Wshadow -Wextra -Wundef -Wmissing-format-attribute -Wcast-align
+ override CFLAGS += -D_GNU_SOURCE -D_FILE_OFFSET_BITS=64
+ override LDLIBS += -lsepol
+
+-all: $(SECILC) $(SECIL2CONF) $(SECIL2TREE) man
++all: $(SECILC) $(SECIL2CONF) $(SECIL2TREE)
+
+ $(SECILC): $(SECILC_OBJS)
+ $(CC) $(CPPFLAGS) $(CFLAGS) $(LDFLAGS) -o $@ $^ $(LDLIBS)
+@@ -56,15 +56,11 @@ $(SECIL2CONF_MANPAGE): $(SECIL2CONF_MANPAGE).xml
+ $(SECIL2TREE_MANPAGE): $(SECIL2TREE_MANPAGE).xml
+ $(XMLTO) man $(SECIL2TREE_MANPAGE).xml
+
+-install: all man
++install: all
+ -mkdir -p $(DESTDIR)$(BINDIR)
+- -mkdir -p $(DESTDIR)$(MANDIR)/man8
+ install -m 755 $(SECILC) $(DESTDIR)$(BINDIR)
+ install -m 755 $(SECIL2CONF) $(DESTDIR)$(BINDIR)
+ install -m 755 $(SECIL2TREE) $(DESTDIR)$(BINDIR)
+- install -m 644 $(SECILC_MANPAGE) $(DESTDIR)$(MANDIR)/man8
+- install -m 644 $(SECIL2CONF_MANPAGE) $(DESTDIR)$(MANDIR)/man8
+- install -m 644 $(SECIL2TREE_MANPAGE) $(DESTDIR)$(MANDIR)/man8
+
+ doc:
+ $(MAKE) -C docs

secilc/pkg.yaml

@@ -0,0 +1,25 @@
+name: secilc
+dependencies:
+ - stage: base
+ - stage: patch
+ - stage: libsepol
+ runtime: true
+steps:
+ - sources:
+ - url: https://github.com/SELinuxProject/selinux/releases/download/{{ .secilc_version }}/secilc-{{ .secilc_version }}.tar.gz
+ destination: secilc.tar.gz
+ sha256: "{{ .secilc_sha256 }}"
+ sha512: "{{ .secilc_sha512 }}"
+ prepare:
+ - |
+ tar -xzf secilc.tar.gz --strip-components=1
+ patch -p1 < /pkg/patches/disable-manpages.patch
+ build:
+ - |
+ make -j $(nproc) all
+ install:
+ - |
+ make install DESTDIR=/rootfs PREFIX=/toolchain
+finalize:
+ - from: /rootfs
+ to: /

tools/pkg.yaml

@@ -40,6 +40,7 @@ dependencies:
  - stage: libcap
  - stage: libffi
  - stage: libnl
+ - stage: libsepol
  - stage: libtasn1
  - stage: libtool
  - stage: libunistring
@@ -64,6 +65,7 @@ dependencies:
  - stage: protoc-gen-go-grpc
  - stage: python3
  - stage: rhash
+ - stage: secilc
  - stage: sd-boot
  - stage: sed
  - stage: squashfs-tools