mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
7d5f45d9e3
to the apparmor_api subtree not getting added in the Makefile. Rather Rather than require every sub-directory that gets added to be enumerated, it uses find to determine what directories and files to install, to avoid future breakage. It is admittedly slower than the original code because install(1) is being invoked for every file in the apparmor.d tree, rather than acting on wildcard globs. That said, I think it's an acceptable tradeoff. Signed-off-by: Steve Beattie <sbeattie@ubuntu.com> Acked-by: John Johansen <john.johansen@canonical.com>
93 lines
2.9 KiB
Makefile
93 lines
2.9 KiB
Makefile
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2002-2009 Novell/SUSE
|
|
# Copyright (C) 2010 Canonical Ltd.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, contact Novell, Inc.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
# Makefile for LSM-based AppArmor profiles
|
|
|
|
NAME=apparmor-profiles
|
|
ALL: local
|
|
COMMONDIR=../common/
|
|
|
|
include common/Make.rules
|
|
|
|
COMMONDIR_EXISTS=$(strip $(shell [ -d ${COMMONDIR} ] && echo true))
|
|
ifeq ($(COMMONDIR_EXISTS), true)
|
|
common/Make.rules: $(COMMONDIR)/Make.rules
|
|
ln -sf $(COMMONDIR) .
|
|
endif
|
|
|
|
DESTDIR=/
|
|
PROFILES_DEST=${DESTDIR}/etc/apparmor.d
|
|
EXTRAS_DEST=${DESTDIR}/usr/share/apparmor/extra-profiles/
|
|
PROFILES_SOURCE=./apparmor.d
|
|
EXTRAS_SOURCE=./apparmor/profiles/extras/
|
|
|
|
SUBDIRS=$(shell find ${PROFILES_SOURCE} -type d -print)
|
|
TOPLEVEL_PROFILES=$(filter-out ${SUBDIRS}, $(wildcard ${PROFILES_SOURCE}/*))
|
|
|
|
local:
|
|
for profile in ${TOPLEVEL_PROFILES}; do \
|
|
fn=$$(basename $$profile); \
|
|
echo "# Site-specific additions and overrides for '$$fn'" > ${PROFILES_SOURCE}/local/$$fn; \
|
|
done; \
|
|
|
|
.PHONY: install
|
|
install: local
|
|
install -m 755 -d ${PROFILES_DEST}
|
|
install -m 755 -d ${PROFILES_DEST}/disable
|
|
for dir in ${SUBDIRS} ; do \
|
|
install -m 755 -d "${PROFILES_DEST}/$${dir#${PROFILES_SOURCE}}" ; \
|
|
done
|
|
for file in $$(find ${PROFILES_SOURCE} -type f -print) ; do \
|
|
install -m 644 "$${file}" "${PROFILES_DEST}/$$(dirname $${file#${PROFILES_SOURCE}})" ; \
|
|
done
|
|
install -m 755 -d ${EXTRAS_DEST}
|
|
install -m 644 ${EXTRAS_SOURCE}/* ${EXTRAS_DEST}
|
|
|
|
LOCAL_ADDITIONS=$(filter-out ${PROFILES_SOURCE}/local/README, $(wildcard ${PROFILES_SOURCE}/local/*))
|
|
.PHONY: clean
|
|
clean:
|
|
-rm -f $(NAME)-$(VERSION)*.tar.gz Make.rules ${LOCAL_ADDITIONS}
|
|
|
|
ifndef VERBOSE
|
|
Q=@
|
|
else
|
|
Q=
|
|
endif
|
|
|
|
ifndef PARSER
|
|
# use system parser
|
|
PARSER=../parser/apparmor_parser
|
|
endif
|
|
|
|
ifndef LOGPROF
|
|
# use ../utils logprof
|
|
LOGPROF=perl -I../utils/ ../utils/aa-logprof
|
|
endif
|
|
|
|
IGNORE_FILES=${EXTRAS_SOURCE}/README
|
|
CHECK_PROFILES=$(filter-out ${IGNORE_FILES} ${SUBDIRS_MUST_BE_SKIPPED}, $(wildcard ${PROFILES_SOURCE}/*) $(wildcard ${EXTRAS_SOURCE}/*))
|
|
|
|
.PHONY: check
|
|
check:
|
|
@echo "*** Checking profiles from ${PROFILES_SOURCE} and ${EXTRAS_SOURCE} against apparmor_parser"
|
|
$(Q)for profile in ${CHECK_PROFILES} ; do \
|
|
${PARSER} -S -b ${PWD}/apparmor.d $${profile} > /dev/null || exit 1; \
|
|
done
|
|
@echo "*** Checking profiles from ${PROFILES_SOURCE} against logprof"
|
|
$(Q)${LOGPROF} -d ${PROFILES_SOURCE} -f /dev/null || exit 1
|