Name:          checkpolicy
Version:       3.5
Release:       2
Summary:       SELinux policy compiler
License:       GPLv2
URL:           https://github.com/SELinuxProject/selinux
Source0:       https://github.com/SELinuxProject/selinux/releases/download/%{version}/checkpolicy-%{version}.tar.gz

Patch0:        backport-checkpolicy-cleanup-resources-on-parse-error.patch
Patch1:        backport-checkpolicy-cleanup-identifiers-on-error.patch
Patch2:        backport-checkpolicy-free-ebitmap-on-error.patch
Patch3:        backport-checkpolicy-check-allocation-and-free-memory-on-erro.patch
Patch4:        backport-checkpolicy-clean-expression-on-error.patch
Patch5:        backport-checkpolicy-free-temporary-bounds-type.patch
Patch6:        backport-checkpolicy-return-YYerror-on-invalid-character.patch
Patch7:        backport-checkpolicy-use-YYerror-only-when-available.patch
Patch8:        backport-checkpolicy-handle-unprintable-token.patch
Patch9:        backport-checkpolicy-free-identifiers-on-invalid-typebounds.patch
Patch10:       backport-checkpolicy-include-ctype.h-for-isprint-3.patch
Patch11:       backport-checkpolicy-free-complete-role_allow_rule-on-error.patch
Patch12:       backport-checkpolicy-Check-the-right-bits-of-an-ibpkeycon-rul.patch
Patch13:       backport-checkpolicy-Fix-MLS-users-in-optional-blocks.patch
Patch14:       backport-checkpolicy-avoid-leak-of-identifier-on-required-att.patch
Patch15:       backport-checkpolicy-avoid-memory-leaks-on-redeclarations.patch
Patch16:       backport-checkpolicy-check-identifier-before-copying.patch

BuildRequires: gcc byacc bison flex flex-static libsepol-static >= %{version} libselinux-devel >= %{version}

Conflicts: selinux-policy-base < 3.13.1-138

%description
checkpolicy is the SELinux policy compiler. It uses libsepol to
generate the binary policy.

(Security-enhanced Linux is a feature of the kernel and some
utilities that implement mandatory access control policies, such as
Type Enforcement, Role-based Access Control and Multi-Level
Security.)

%package_help

%prep
%autosetup -n %{name}-%{version} -p1

%build
make clean
make LIBDIR="%{_libdir}" CFLAGS="%{optflags}" LDFLAGS="$RPM_LD_FLAGS"
make -C test LIBDIR="%{_libdir}" CFLAGS="%{optflags}" LDFLAGS="$RPM_LD_FLAGS"

%install
rm -rf %{buildroot}
mkdir -p %{buildroot}%{_bindir}
%make_install LIBDIR="%{_libdir}"
install test/dismod %{buildroot}%{_bindir}/sedismod
install test/dispol %{buildroot}%{_bindir}/sedispol

%pre

%preun

%post

%postun

%files
%defattr(-,root,root)
%license LICENSE
%{_bindir}/*

%files help
%defattr(-,root,root)
%{_mandir}/*/*

%changelog
* Fri Mar 14 2025 wangjiang <app@cameyan.com> - 3.5-2
- backport patches from upstream

* Mon Jul 17 2023 zhangguangzhi <zhangguangzhi3@huawei.com> - 3.5-1
- update version to 3.5

* Fri Mar 10 2023 zhangchenfeng <zhangchenfeng1@huawei.com> - 3.4-2
- backport upstrem bugfix

* Thu Feb 2 2023 zhangguangzhi <zhangguangzhi3@huawei.com> - 3.4-1
- update version to 3.4

* Tue Jan 18 2022 yixiangzhike <yixiangzhike007@163.com> - 3.3-1
- update to 3.3

* Fri Jul 30 2021 chenyanpanHW <chenyanpan@huawei.com> - 3.1-2
- DESC: delete -Sgit from %autosetup, and delete BuildRequires git

* Fri Jul 17 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.1-1
- update to 3.1

* Sat Sep 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.8-6
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:revise description

* Fri Aug 23 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.8-5
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:strengthen spec

* Tue Aug 20 2019 guoxiaoqi<guoxiaoqi2@huawei.com> - 2.8-4
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename patches

* Tue Jul  9 2019 zhangyujing <zhangyujing1@huawei.com> - 2.8-3
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Destroy the class datum if it fails to initialize

* Thu Jul 12 2018 openEuler Buildteam <buildteam@openeuler.org> - 2.8-2
- Package init