Convert all selinux/* applets to "new style" applet definitions

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

diff --git a/include/applets.src.h b/include/applets.src.h
index c72dca8496f8e5a6dce8c787d4d23dfe5c153f72..4e789151d95ea5aa7f65237053f220fc8f6ad254 100644 (file)
--- a/include/applets.src.h
+++ b/include/applets.src.h
@@ -73,25 +73,13 @@ s     - suid type:
 
 
 INSERT
-IF_CHCON(APPLET(chcon, BB_DIR_USR_BIN, BB_SUID_DROP))
 IF_DHCPRELAY(APPLET(dhcprelay, BB_DIR_USR_SBIN, BB_SUID_DROP))
 IF_DUMPLEASES(APPLET(dumpleases, BB_DIR_USR_BIN, BB_SUID_DROP))
 //IF_E2FSCK(APPLET(e2fsck, BB_DIR_SBIN, BB_SUID_DROP))
 //IF_E2LABEL(APPLET_ODDNAME(e2label, tune2fs, BB_DIR_SBIN, BB_SUID_DROP, e2label))
 //IF_E2FSCK(APPLET_ODDNAME(fsck.ext2, e2fsck, BB_DIR_SBIN, BB_SUID_DROP, fsck_ext2))
 //IF_E2FSCK(APPLET_ODDNAME(fsck.ext3, e2fsck, BB_DIR_SBIN, BB_SUID_DROP, fsck_ext3))
-IF_GETENFORCE(APPLET(getenforce, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_GETSEBOOL(APPLET(getsebool, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_LOAD_POLICY(APPLET(load_policy, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_MATCHPATHCON(APPLET(matchpathcon, BB_DIR_USR_SBIN, BB_SUID_DROP))
 //IF_PARSE(APPLET(parse, BB_DIR_USR_BIN, BB_SUID_DROP))
-IF_RESTORECON(APPLET_ODDNAME(restorecon, setfiles, BB_DIR_SBIN, BB_SUID_DROP, restorecon))
-IF_RUNCON(APPLET(runcon, BB_DIR_USR_BIN, BB_SUID_DROP))
-IF_SELINUXENABLED(APPLET(selinuxenabled, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_SESTATUS(APPLET(sestatus, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_SETENFORCE(APPLET(setenforce, BB_DIR_USR_SBIN, BB_SUID_DROP))
-IF_SETFILES(APPLET(setfiles, BB_DIR_SBIN, BB_SUID_DROP))
-IF_SETSEBOOL(APPLET(setsebool, BB_DIR_USR_SBIN, BB_SUID_DROP))
 IF_UDHCPC(APPLET(udhcpc, BB_DIR_SBIN, BB_SUID_DROP))
 IF_UDHCPD(APPLET(udhcpd, BB_DIR_USR_SBIN, BB_SUID_DROP))
 

diff --git a/selinux/Config.src b/selinux/Config.src
index d4701f60b2d2cd9036771dc8154b608d714a4ab6..9cb755a0f5bd92d05836ea5b949b31640a0fdd8a 100644 (file)
--- a/selinux/Config.src
+++ b/selinux/Config.src
@@ -8,117 +8,4 @@ menu "SELinux Utilities"
 
 INSERT
 
-config CHCON
-       bool "chcon"
-       default n
-       depends on SELINUX
-       help
-         Enable support to change the security context of file.
-
-config FEATURE_CHCON_LONG_OPTIONS
-       bool "Enable long options"
-       default y
-       depends on CHCON && LONG_OPTS
-       help
-         Support long options for the chcon applet.
-
-config GETENFORCE
-       bool "getenforce"
-       default n
-       depends on SELINUX
-       help
-         Enable support to get the current mode of SELinux.
-
-config GETSEBOOL
-       bool "getsebool"
-       default n
-       depends on SELINUX
-       help
-         Enable support to get SELinux boolean values.
-
-config LOAD_POLICY
-       bool "load_policy"
-       default n
-       depends on SELINUX
-       help
-         Enable support to load SELinux policy.
-
-config MATCHPATHCON
-       bool "matchpathcon"
-       default n
-       depends on SELINUX
-       help
-         Enable support to get default security context of the
-         specified path from the file contexts configuration.
-
-config RESTORECON
-       bool "restorecon"
-       default n
-       depends on SELINUX
-       help
-         Enable support to relabel files. The feature is almost
-         the same as setfiles, but usage is a little different.
-
-config RUNCON
-       bool "runcon"
-       default n
-       depends on SELINUX
-       help
-         Enable support to run command in specified security context.
-
-config FEATURE_RUNCON_LONG_OPTIONS
-       bool "Enable long options"
-       default y
-       depends on RUNCON && LONG_OPTS
-       help
-         Support long options for the runcon applet.
-
-config SELINUXENABLED
-       bool "selinuxenabled"
-       default n
-       depends on SELINUX
-       help
-         Enable support for this command to be used within shell scripts
-         to determine if selinux is enabled.
-
-config SETENFORCE
-       bool "setenforce"
-       default n
-       depends on SELINUX
-       help
-         Enable support to modify the mode SELinux is running in.
-
-config SETFILES
-       bool "setfiles"
-       default n
-       depends on SELINUX
-       help
-         Enable support to modify to relabel files.
-         Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
-         (It is default in libselinux's Makefile), you _must_ enable
-         CONFIG_LFS.
-
-config FEATURE_SETFILES_CHECK_OPTION
-       bool "Enable check option"
-       default n
-       depends on SETFILES
-       help
-         Support "-c" option (check the validity of the contexts against
-         the specified binary policy) for setfiles. Requires libsepol.
-
-config SETSEBOOL
-       bool "setsebool"
-       default n
-       depends on SELINUX
-       help
-         Enable support for change boolean.
-         semanage and -P option is not supported yet.
-
-config SESTATUS
-       bool "sestatus"
-       default n
-       depends on SELINUX
-       help
-         Displays the status of SELinux.
-
 endmenu

diff --git a/selinux/Kbuild.src b/selinux/Kbuild.src
index cdd5f2adf707c7a825a707df93cf8b26402239d8..62c9e64cdd94099efa32b82ec0b3d1217812d9b3 100644 (file)
--- a/selinux/Kbuild.src
+++ b/selinux/Kbuild.src
@@ -8,15 +8,3 @@
 lib-y:=
 
 INSERT
-lib-$(CONFIG_CHCON)            += chcon.o
-lib-$(CONFIG_GETENFORCE)       += getenforce.o
-lib-$(CONFIG_GETSEBOOL)                += getsebool.o
-lib-$(CONFIG_LOAD_POLICY)      += load_policy.o
-lib-$(CONFIG_MATCHPATHCON)     += matchpathcon.o
-lib-$(CONFIG_RUNCON)           += runcon.o
-lib-$(CONFIG_SELINUXENABLED)   += selinuxenabled.o
-lib-$(CONFIG_SETENFORCE)       += setenforce.o
-lib-$(CONFIG_SETFILES)         += setfiles.o
-lib-$(CONFIG_RESTORECON)       += setfiles.o
-lib-$(CONFIG_SETSEBOOL)                += setsebool.o
-lib-$(CONFIG_SESTATUS)         += sestatus.o

diff --git a/selinux/chcon.c b/selinux/chcon.c
index f947c2c128490c959c9464cb892127e4d7476d45..c743013cec394d30d45ea907adcf6991ba793eb8 100644 (file)
--- a/selinux/chcon.c
+++ b/selinux/chcon.c
@@ -7,6 +7,23 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config CHCON
+//config:      bool "chcon"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to change the security context of file.
+//config:
+//config:config FEATURE_CHCON_LONG_OPTIONS
+//config:      bool "Enable long options"
+//config:      default y
+//config:      depends on CHCON && LONG_OPTS
+//config:      help
+//config:        Support long options for the chcon applet.
+
+//applet:IF_CHCON(APPLET(chcon, BB_DIR_USR_BIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_CHCON) += chcon.o
 
 //usage:#define chcon_trivial_usage
 //usage:       "[OPTIONS] CONTEXT FILE..."

diff --git a/selinux/getenforce.c b/selinux/getenforce.c
index 56611d6936e4e43da4c89b1092cc87493629baae..37477652b66a80d77c3c8c44ddf40ad030aec04e 100644 (file)
--- a/selinux/getenforce.c
+++ b/selinux/getenforce.c
@@ -6,6 +6,16 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config GETENFORCE
+//config:      bool "getenforce"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to get the current mode of SELinux.
+
+//applet:IF_GETENFORCE(APPLET(getenforce, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_GETENFORCE) += getenforce.o
 
 //usage:#define getenforce_trivial_usage NOUSAGE_STR
 //usage:#define getenforce_full_usage ""

diff --git a/selinux/getsebool.c b/selinux/getsebool.c
index e8f0fefb053d4b53106fa9001faae6b7a0b7bc42..fce478f5b7c3c3d2a2c2ce54aab7ec4bfa218166 100644 (file)
--- a/selinux/getsebool.c
+++ b/selinux/getsebool.c
@@ -6,6 +6,16 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config GETSEBOOL
+//config:      bool "getsebool"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to get SELinux boolean values.
+
+//applet:IF_GETSEBOOL(APPLET(getsebool, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_GETSEBOOL) += getsebool.o
 
 //usage:#define getsebool_trivial_usage
 //usage:       "-a or getsebool boolean..."

diff --git a/selinux/load_policy.c b/selinux/load_policy.c
index ce139dbf2f2458df3e29c1c4040e2801a90efbbc..f969453e3636e6d201ea0acbe15082c04e34f660 100644 (file)
--- a/selinux/load_policy.c
+++ b/selinux/load_policy.c
@@ -4,6 +4,16 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config LOAD_POLICY
+//config:      bool "load_policy"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to load SELinux policy.
+
+//applet:IF_LOAD_POLICY(APPLET(load_policy, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_LOAD_POLICY) += load_policy.o
 
 //usage:#define load_policy_trivial_usage NOUSAGE_STR
 //usage:#define load_policy_full_usage ""

diff --git a/selinux/matchpathcon.c b/selinux/matchpathcon.c
index 9e5728eb3b8c31aa6a2ad79ed63af7b8b01b0cdb..a3b2fcb74d197540a6a9ea599a02e7b80a271426 100644 (file)
--- a/selinux/matchpathcon.c
+++ b/selinux/matchpathcon.c
@@ -5,6 +5,17 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config MATCHPATHCON
+//config:      bool "matchpathcon"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to get default security context of the
+//config:        specified path from the file contexts configuration.
+
+//applet:IF_MATCHPATHCON(APPLET(matchpathcon, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_MATCHPATHCON) += matchpathcon.o
 
 //usage:#define matchpathcon_trivial_usage
 //usage:       "[-n] [-N] [-f file_contexts_file] [-p prefix] [-V]"

diff --git a/selinux/runcon.c b/selinux/runcon.c
index 27f2be3a90809c7a12ea2935d44e5e84dd03e80d..366834e46de67637a5de9dbaba7baaf6ea54a589 100644 (file)
--- a/selinux/runcon.c
+++ b/selinux/runcon.c
@@ -28,6 +28,23 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config RUNCON
+//config:      bool "runcon"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to run command in specified security context.
+//config:
+//config:config FEATURE_RUNCON_LONG_OPTIONS
+//config:      bool "Enable long options"
+//config:      default y
+//config:      depends on RUNCON && LONG_OPTS
+//config:      help
+//config:        Support long options for the runcon applet.
+
+//applet:IF_RUNCON(APPLET(runcon, BB_DIR_USR_BIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_RUNCON) += runcon.o
 
 //usage:#define runcon_trivial_usage
 //usage:       "[-c] [-u USER] [-r ROLE] [-t TYPE] [-l RANGE] PROG ARGS\n"

diff --git a/selinux/selinuxenabled.c b/selinux/selinuxenabled.c
index ce830dc22025a7b9985772dd5fd471552b551d75..b80c4e71b39f6fcc15b28f4b615c8dd4c59b1244 100644 (file)
--- a/selinux/selinuxenabled.c
+++ b/selinux/selinuxenabled.c
@@ -6,6 +6,17 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config SELINUXENABLED
+//config:      bool "selinuxenabled"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support for this command to be used within shell scripts
+//config:        to determine if selinux is enabled.
+
+//applet:IF_SELINUXENABLED(APPLET(selinuxenabled, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_SELINUXENABLED) += selinuxenabled.o
 
 //usage:#define selinuxenabled_trivial_usage NOUSAGE_STR
 //usage:#define selinuxenabled_full_usage ""

diff --git a/selinux/sestatus.c b/selinux/sestatus.c
index e5943187360415d65d02b3f84e05a3726165238a..ad49c9d25fc2b9f2ea3e8dcdef460e5ed1554869 100644 (file)
--- a/selinux/sestatus.c
+++ b/selinux/sestatus.c
@@ -7,6 +7,16 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config SESTATUS
+//config:      bool "sestatus"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Displays the status of SELinux.
+
+//applet:IF_SESTATUS(APPLET(sestatus, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_SESTATUS) += sestatus.o
 
 //usage:#define sestatus_trivial_usage
 //usage:       "[-vb]"

diff --git a/selinux/setenforce.c b/selinux/setenforce.c
index c5bc0a5a69c79b3f89a208cd43d9510bd55e9e12..8d18abd29fef05614037010fb5f9f69d5fa93b55 100644 (file)
--- a/selinux/setenforce.c
+++ b/selinux/setenforce.c
@@ -6,6 +6,16 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config SETENFORCE
+//config:      bool "setenforce"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to modify the mode SELinux is running in.
+
+//applet:IF_SETENFORCE(APPLET(setenforce, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_SETENFORCE) += setenforce.o
 
 //usage:#define setenforce_trivial_usage
 //usage:       "[Enforcing | Permissive | 1 | 0]"

diff --git a/selinux/setfiles.c b/selinux/setfiles.c
index c9597d54e24d453536cea0b83ed56454af2ee646..4fc307f550d7c712b3f738ea9d723e048a0c6b66 100644 (file)
--- a/selinux/setfiles.c
+++ b/selinux/setfiles.c
@@ -3,6 +3,37 @@
   policycoreutils was released under GPL 2.
   Port to BusyBox (c) 2007 by Yuichi Nakamura <ynakam@hitachisoft.jp>
 */
+//config:config SETFILES
+//config:      bool "setfiles"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to modify to relabel files.
+//config:        Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
+//config:        (It is default in libselinux's Makefile), you _must_ enable
+//config:        CONFIG_LFS.
+//config:
+//config:config FEATURE_SETFILES_CHECK_OPTION
+//config:      bool "Enable check option"
+//config:      default n
+//config:      depends on SETFILES
+//config:      help
+//config:        Support "-c" option (check the validity of the contexts against
+//config:        the specified binary policy) for setfiles. Requires libsepol.
+//config:
+//config:config RESTORECON
+//config:      bool "restorecon"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support to relabel files. The feature is almost
+//config:        the same as setfiles, but usage is a little different.
+
+//applet:IF_SETFILES(APPLET(setfiles, BB_DIR_SBIN, BB_SUID_DROP))
+//applet:IF_RESTORECON(APPLET_ODDNAME(restorecon, setfiles, BB_DIR_SBIN, BB_SUID_DROP, restorecon))
+
+//kbuild:lib-$(CONFIG_SETFILES) += setfiles.o
+//kbuild:lib-$(CONFIG_RESTORECON) += setfiles.o
 
 //usage:#define setfiles_trivial_usage
 //usage:       "[-dnpqsvW] [-e DIR]... [-o FILE] [-r alt_root_path]"

diff --git a/selinux/setsebool.c b/selinux/setsebool.c
index ec682e5c5515c5b38cf0cef3f4407cb0623077ad..6a6bd031c96f66999e0a47bc8a1b94eef0e905c9 100644 (file)
--- a/selinux/setsebool.c
+++ b/selinux/setsebool.c
@@ -7,6 +7,17 @@
  *
  * Licensed under GPLv2, see file LICENSE in this source tree.
  */
+//config:config SETSEBOOL
+//config:      bool "setsebool"
+//config:      default n
+//config:      depends on SELINUX
+//config:      help
+//config:        Enable support for change boolean.
+//config:        semanage and -P option is not supported yet.
+
+//applet:IF_SETSEBOOL(APPLET(setsebool, BB_DIR_USR_SBIN, BB_SUID_DROP))
+
+//kbuild:lib-$(CONFIG_SETSEBOOL) += setsebool.o
 
 //usage:#define setsebool_trivial_usage
 //usage:       "boolean value"