| config BR2_PACKAGE_SELINUX_PYTHON |
| bool "selinux-python" |
| depends on BR2_USE_MMU |
| depends on BR2_USE_WCHAR |
| depends on BR2_TOOLCHAIN_HAS_THREADS |
| depends on !BR2_STATIC_LIBS |
| select BR2_PACKAGE_PYTHON3 |
| help |
| A set of SELinux tools written in python that help with |
| managing a system with SELinux enabled. If no packages are |
| selected nothing will actually be built. |
| |
| https://github.com/SELinuxProject/selinux/wiki |
| |
| if BR2_PACKAGE_SELINUX_PYTHON |
| |
| config BR2_PACKAGE_SELINUX_PYTHON_AUDIT2ALLOW |
| bool "audit2allow" |
| depends on BR2_TOOLCHAIN_GCC_AT_LEAST_5 # semodule-utils -> libsepol |
| select BR2_PACKAGE_CHECKPOLICY |
| select BR2_PACKAGE_SELINUX_PYTHON_SEPOLGEN |
| select BR2_PACKAGE_SEMODULE_UTILS |
| help |
| This module installs two programs: |
| |
| audit2allow - Generate SELinux policy allow/dontaudit rules |
| from logs of denied operations. |
| |
| audit2why - translates SELinux audit messages into a |
| description of why the access was denied (audit2allow -w) |
| |
| comment "audit2allow needs a toolchain w/ gcc 5" |
| depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_5 |
| |
| config BR2_PACKAGE_SELINUX_PYTHON_SEPOLGEN |
| bool "sepolgen" |
| depends on BR2_TOOLCHAIN_GCC_AT_LEAST_5 # semodule-utils -> libsepol |
| select BR2_PACKAGE_SEMODULE_UTILS |
| help |
| This package contains a Python module that allows you to |
| generate an initial SELinux policy module template. |
| |
| comment "sepolgen needs a toolchain w/ gcc 5" |
| depends on !BR2_TOOLCHAIN_GCC_AT_LEAST_5 |
| |
| endif |
| |
| comment "selinux-python packages needs a toolchain w/ wchar, threads, dynamic library" |
| depends on BR2_USE_MMU |
| depends on !BR2_USE_WCHAR || !BR2_TOOLCHAIN_HAS_THREADS || \ |
| BR2_STATIC_LIBS |
