diff --git a/refpolicy/Changelog b/refpolicy/Changelog index dcda94c..160a73e 100644 --- a/refpolicy/Changelog +++ b/refpolicy/Changelog @@ -1,3 +1,4 @@ +- Add targets for sechecker. - Updated to sedoctool to read bool files and tunable files separately. - Changed the xml tag of to to be consistent diff --git a/refpolicy/Makefile b/refpolicy/Makefile index 6bcd936..d01f739 100644 --- a/refpolicy/Makefile +++ b/refpolicy/Makefile @@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy SETFILES := $(SBINDIR)/setfiles GENHOMEDIRCON := $(SBINDIR)/genhomedircon XMLLINT := $(BINDIR)/xmllint +SECHECK := $(BINDIR)/sechecker CFLAGS := -Wall diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic index 259e287..830cebe 100644 --- a/refpolicy/Rules.monolithic +++ b/refpolicy/Rules.monolithic @@ -203,6 +203,16 @@ relabel: $(FC) $(SETFILES) ######################################## # +# Run policy source checks +# +check: policy.conf $(FC) + $(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res + +longcheck: policy.conf $(FC) + $(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res + +######################################## +# # Clean the sources # clean: @@ -210,5 +220,6 @@ clean: rm -f policy.conf rm -f policy.$(PV) rm -f $(FC) + rm -f *.res -.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean +.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean