3a2608c47a
Since the bump of pip to version 25.3 in commit 285097051d4a7dd821f01d15c705867f7e26c635, the build of the Python bindings of libselinux is broken for both the host and target variants. For the host variant, because "pip install" no longer finds the system-provided setuptools and tries to download setuptools by itself, causing build issues because our host-python doesn't have SSL support: Could not fetch URL https://pypi.org/simple/setuptools/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/setuptools/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping For the target variant, because "pip install" no longer finds the sysconfigdata package: ModuleNotFoundError: No module named '_sysconfigdata__linux_sparc64-linux-gnu' [end of output] We fix this by taking a patch from Debian, which is slightly tweaked to also cover our host package (the original Debian patch was passing --no-build-isolation only when DESTDIR was not empty, but in Buildroot host packages are built with DESTDIR empty, and we do need --no-build-isolation). Fixes: https://autobuild.buildroot.net/results/0e9de0c0d8b6ec57eea9f8834f02076b296ba4f1/ (host-libselinux) https://autobuild.buildroot.org/results/1b87c659f1901b0bf33fa4a2ff0ed40b13114bba/ (libselinux) Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Co-Authored-By: Julien Olivain <ju.o@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit 0e5eef911c9b313fddd9912128bf09d605b5f6ae) Signed-off-by: Thomas Perale <thomas.perale@mind.be>
145 lines
4.4 KiB
Makefile
145 lines
4.4 KiB
Makefile
################################################################################
|
|
#
|
|
# libselinux
|
|
#
|
|
################################################################################
|
|
|
|
LIBSELINUX_VERSION = 3.9
|
|
LIBSELINUX_SITE = https://github.com/SELinuxProject/selinux/releases/download/$(LIBSELINUX_VERSION)
|
|
LIBSELINUX_LICENSE = Public Domain
|
|
LIBSELINUX_LICENSE_FILES = LICENSE
|
|
LIBSELINUX_CPE_ID_VENDOR = selinuxproject
|
|
|
|
LIBSELINUX_DEPENDENCIES = \
|
|
$(BR2_COREUTILS_HOST_DEPENDENCY) host-pkgconf libsepol pcre2
|
|
|
|
LIBSELINUX_INSTALL_STAGING = YES
|
|
|
|
# Set SHLIBDIR to /usr/lib so it has the same value than LIBDIR, as a result
|
|
# we won't have to use a relative path in 0002-revert-ln-relative.patch
|
|
LIBSELINUX_MAKE_OPTS = \
|
|
$(TARGET_CONFIGURE_OPTS) \
|
|
ARCH=$(NORMALIZED_ARCH) \
|
|
SHLIBDIR=/usr/lib \
|
|
USE_PCRE2=y
|
|
|
|
LIBSELINUX_MAKE_INSTALL_TARGETS = install
|
|
|
|
ifeq ($(BR2_TOOLCHAIN_USES_GLIBC),)
|
|
LIBSELINUX_DEPENDENCIES += musl-fts
|
|
LIBSELINUX_MAKE_OPTS += FTS_LDLIBS=-lfts
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PYTHON3),y)
|
|
LIBSELINUX_DEPENDENCIES += \
|
|
python3 \
|
|
python-setuptools \
|
|
host-python-pip \
|
|
host-python-setuptools \
|
|
host-swig
|
|
|
|
LIBSELINUX_MAKE_ENV += \
|
|
$(PKG_PYTHON_SETUPTOOLS_ENV)
|
|
|
|
LIBSELINUX_MAKE_OPTS += \
|
|
$(PKG_PYTHON_SETUPTOOLS_ENV) \
|
|
PYTHON=python$(PYTHON3_VERSION_MAJOR)
|
|
|
|
LIBSELINUX_MAKE_INSTALL_TARGETS += install-pywrap
|
|
|
|
# dependencies are broken and result in file truncation errors at link
|
|
# time if the Python bindings are built through the same make
|
|
# invocation as the rest of the library.
|
|
define LIBSELINUX_BUILD_PYTHON_BINDINGS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(LIBSELINUX_MAKE_OPTS) swigify pywrap
|
|
endef
|
|
endif # python3
|
|
|
|
define LIBSELINUX_BUILD_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(LIBSELINUX_MAKE_OPTS) all
|
|
$(LIBSELINUX_BUILD_PYTHON_BINDINGS)
|
|
endef
|
|
|
|
define LIBSELINUX_INSTALL_STAGING_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(LIBSELINUX_MAKE_OPTS) DESTDIR=$(STAGING_DIR) \
|
|
$(LIBSELINUX_MAKE_INSTALL_TARGETS)
|
|
endef
|
|
|
|
define LIBSELINUX_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(LIBSELINUX_MAKE_OPTS) DESTDIR=$(TARGET_DIR) \
|
|
$(LIBSELINUX_MAKE_INSTALL_TARGETS)
|
|
if ! grep -q "selinuxfs" $(TARGET_DIR)/etc/fstab; then \
|
|
echo "none /sys/fs/selinux selinuxfs noauto 0 0" >> $(TARGET_DIR)/etc/fstab ; fi
|
|
endef
|
|
|
|
HOST_LIBSELINUX_DEPENDENCIES = \
|
|
host-pkgconf \
|
|
host-libsepol \
|
|
host-pcre2 \
|
|
host-swig \
|
|
host-python3 \
|
|
host-python-pip \
|
|
host-python-setuptools
|
|
|
|
HOST_LIBSELINUX_MAKE_OPTS = \
|
|
$(HOST_CONFIGURE_OPTS) \
|
|
PREFIX=$(HOST_DIR) \
|
|
SHLIBDIR=$(HOST_DIR)/lib \
|
|
$(HOST_PKG_PYTHON_SETUPTOOLS_ENV) \
|
|
PYTHON=python$(PYTHON3_VERSION_MAJOR) \
|
|
USE_PCRE2=y
|
|
|
|
define HOST_LIBSELINUX_BUILD_CMDS
|
|
$(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
|
|
$(HOST_LIBSELINUX_MAKE_OPTS) all
|
|
# Generate python interface wrapper
|
|
$(HOST_MAKE_ENV) $(MAKE1) -C $(@D) \
|
|
$(HOST_LIBSELINUX_MAKE_OPTS) swigify pywrap
|
|
endef
|
|
|
|
define HOST_LIBSELINUX_INSTALL_CMDS
|
|
$(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(HOST_LIBSELINUX_MAKE_OPTS) install
|
|
# Install python interface wrapper
|
|
$(HOST_MAKE_ENV) $(MAKE) -C $(@D) \
|
|
$(HOST_LIBSELINUX_MAKE_OPTS) install-pywrap
|
|
endef
|
|
|
|
define LIBSELINUX_LINUX_CONFIG_FIXUPS
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_SELINUX)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_INET)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_NET)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX)
|
|
$(call KCONFIG_SET_OPT,CONFIG_LSM,"selinux")
|
|
$(if $(BR2_TARGET_ROOTFS_EROFS),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_XATTR)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_EXT2),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_XATTR)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_EXT2_3),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_EXT2_4),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT4_FS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_F2FS),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_XATTR)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_JFFS2),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
|
|
$(if $(BR2_TARGET_ROOTFS_SQUASHFS),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_SQUASHFS_XATTR))
|
|
$(if $(BR2_TARGET_ROOTFS_UBIFS),
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_XATTR)
|
|
$(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_SECURITY))
|
|
endef
|
|
|
|
$(eval $(generic-package))
|
|
$(eval $(host-generic-package))
|