ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / lib64 / python2.7 / site-packages / sepolicy / templates

header_comment_section="""\
# vim: sw=4:ts=4:et
"""

base_section="""\

%define selinux_policyver VERSION

Name:   MODULENAME_selinux
Version:	1.0
Release:	1%{?dist}
Summary:	SELinux policy module for MODULENAME

Group:	System Environment/Base		
License:	GPLv2+	
# This is an example. You will need to change it.
URL:		http://HOSTNAME
Source0:	MODULENAME.pp
Source1:	MODULENAME.if
Source2:	DOMAINNAME_selinux.8
Source3:	DOMAINNAME_u

Requires: policycoreutils, libselinux-utils
Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils
Requires(postun): policycoreutils
"""

mid_section="""\
BuildArch: noarch

%description
This package installs and sets up the  SELinux policy security module for MODULENAME.

%install
install -d %{buildroot}%{_datadir}/selinux/packages
install -m 644 %{SOURCE0} %{buildroot}%{_datadir}/selinux/packages
install -d %{buildroot}%{_datadir}/selinux/devel/include/contrib
install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/selinux/devel/include/contrib/
install -d %{buildroot}%{_mandir}/man8/
install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/DOMAINNAME_selinux.8
install -d %{buildroot}/etc/selinux/targeted/contexts/users/
install -m 644 %{SOURCE3} %{buildroot}/etc/selinux/targeted/contexts/users/DOMAINNAME_u

%post
semodule -n -i %{_datadir}/selinux/packages/MODULENAME.pp
if /usr/sbin/selinuxenabled ; then
    /usr/sbin/load_policy
    %relabel_files
    /usr/sbin/semanage user -a -R DOMAINNAME_r DOMAINNAME_u
fi;
exit 0

%postun
if [ $1 -eq 0 ]; then
    semodule -n -r MODULENAME
    if /usr/sbin/selinuxenabled ; then
       /usr/sbin/load_policy
       %relabel_files
       /usr/sbin/semanage user -d DOMAINNAME_u
    fi;
fi;
exit 0

%files
%attr(0600,root,root) %{_datadir}/selinux/packages/MODULENAME.pp
%{_datadir}/selinux/devel/include/contrib/MODULENAME.if
%{_mandir}/man8/DOMAINNAME_selinux.8.*
/etc/selinux/targeted/contexts/users/DOMAINNAME_u

%changelog
* TODAYSDATE YOUR NAME <YOUR@EMAILADDRESS> 1.0-1
- Initial version

"""

define_relabel_files_begin ="""\
\n
%define relabel_files() \\
"""

define_relabel_files_end ="""\
restorecon -R FILENAME; \\
"""

[-] spec.pyo [edit]
[-] var_lib.pyo [edit]
[-] executable.pyc [edit]
[-] var_log.pyo [edit]
[-] var_log.pyc [edit]
[-] var_run.py [edit]
[-] unit_file.pyo [edit]
[-] __init__.pyo [edit]
[-] var_spool.pyc [edit]
[-] rw.pyo [edit]
[-] var_lib.py [edit]
[-] var_spool.py [edit]
[-] semodule.pyo [edit]
[-] spec.py [edit]
[-] tmp.pyo [edit]
[+] ..
[-] network.pyc [edit]
[-] test_module.py [edit]
[-] network.py [edit]
[-] var_run.pyo [edit]
[-] rw.pyc [edit]
[-] executable.py [edit]
[-] __init__.pyc [edit]
[-] boolean.py [edit]
[-] user.py [edit]
[-] unit_file.py [edit]
[-] var_cache.pyo [edit]
[-] var_run.pyc [edit]
[-] tmp.pyc [edit]
[-] script.pyo [edit]
[-] etc_rw.py [edit]
[-] executable.pyo [edit]
[-] boolean.pyo [edit]
[-] tmp.py [edit]
[-] var_lib.pyc [edit]
[-] boolean.pyc [edit]
[-] etc_rw.pyo [edit]
[-] semodule.py [edit]
[-] spec.pyc [edit]
[-] var_log.py [edit]
[-] unit_file.pyc [edit]
[-] user.pyo [edit]
[-] test_module.pyo [edit]
[-] script.pyc [edit]
[-] var_cache.pyc [edit]
[-] __init__.py [edit]
[-] var_spool.pyo [edit]
[-] user.pyc [edit]
[-] rw.py [edit]
[-] network.pyo [edit]
[-] test_module.pyc [edit]
[-] etc_rw.pyc [edit]
[-] var_cache.py [edit]
[-] semodule.pyc [edit]
[-] script.py [edit]