1 # SPDX-License-Identifier: GPL-2.0 1 # SPDX-License-Identifier: GPL-2.0
2 # 2 #
3 # Makefile for building the SELinux module as 3 # Makefile for building the SELinux module as part of the kernel tree.
4 # 4 #
5 5
6 # NOTE: There are a number of improvements tha <<
7 # once the kernel requires make v4.3 or greate <<
8 # lacking in older versions of make is support <<
9 # improvements are noted inline in the Makefil <<
10 <<
11 obj-$(CONFIG_SECURITY_SELINUX) := selinux.o 6 obj-$(CONFIG_SECURITY_SELINUX) := selinux.o
12 7
13 ccflags-y := -I$(srctree)/security/selinux -I$ <<
14 <<
15 ccflags-$(CONFIG_SECURITY_SELINUX_DEBUG) += -D <<
16 <<
17 selinux-y := avc.o hooks.o selinuxfs.o netlink 8 selinux-y := avc.o hooks.o selinuxfs.o netlink.o nlmsgtab.o netif.o \
18 netnode.o netport.o status.o \ !! 9 netnode.o netport.o ibpkey.o exports.o \
19 ss/ebitmap.o ss/hashtab.o ss/symt 10 ss/ebitmap.o ss/hashtab.o ss/symtab.o ss/sidtab.o ss/avtab.o \
20 ss/policydb.o ss/services.o ss/co !! 11 ss/policydb.o ss/services.o ss/conditional.o ss/mls.o ss/status.o
21 12
22 selinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfr 13 selinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfrm.o
>> 14
23 selinux-$(CONFIG_NETLABEL) += netlabel.o 15 selinux-$(CONFIG_NETLABEL) += netlabel.o
24 selinux-$(CONFIG_SECURITY_INFINIBAND) += ibpke <<
25 selinux-$(CONFIG_IMA) += ima.o <<
26 16
27 genhdrs := flask.h av_permissions.h !! 17 ccflags-y := -I$(srctree)/security/selinux -I$(srctree)/security/selinux/include
28 18
29 # see the note above, replace the dependency r <<
30 # $(addprefix $(obj)/,$(selinux-y)): $(addpre <<
31 $(addprefix $(obj)/,$(selinux-y)): $(obj)/flas 19 $(addprefix $(obj)/,$(selinux-y)): $(obj)/flask.h
32 20
33 quiet_cmd_genhdrs = GEN $(addprefix $(obj) !! 21 quiet_cmd_flask = GEN $(obj)/flask.h $(obj)/av_permissions.h
34 cmd_genhdrs = $< $(addprefix $(obj)/,$(g !! 22 cmd_flask = $< $(obj)/flask.h $(obj)/av_permissions.h
35 23
36 # see the note above, replace the $targets and !! 24 targets += flask.h av_permissions.h
37 # below: !! 25 # once make >= 4.3 is required, we can use grouped targets in the rule below,
38 # targets += $(genhdrs) !! 26 # which basically involves adding both headers and a '&' before the colon, see
39 # $(addprefix $(obj)/,$(genhdrs)) &: scripts/ !! 27 # the example below:
40 targets += flask.h !! 28 # $(obj)/flask.h $(obj)/av_permissions.h &: scripts/selinux/...
41 $(obj)/flask.h: scripts/selinux/genheaders/gen 29 $(obj)/flask.h: scripts/selinux/genheaders/genheaders FORCE
42 $(call if_changed,genhdrs) !! 30 $(call if_changed,flask)
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.