Name:           libsepol
Version:        3.1
Release:        5
Summary:        SELinux binary policy manipulation library
License:        LGPLv2+
URL:            https://github.com/SELinuxProject/selinux/wiki/Releases
Source0:        https://github.com/SELinuxProject/selinux/releases/download/20200710/libsepol-3.1.tar.gz

Patch1:		backport-libsepol-cil-fix-NULL-pointer-dereference-in-cil_fil.patch
Patch2:         backport-libsepol-cil-always-destroy-the-lexer-state.patch
Patch3:         backport-libsepol-cil-destroy-perm_datums-when-_cil_resolve_.patch
Patch4:         backport-libsepol-cil-do-not-add-a-stack-variable-to-a-list.patch
Patch5:         backport-libsepol-cil-Fix-heap-use-after-free-in_class-rese.patch
Patch6:         backport-libsepol-cil-fix-NULL-pointer-dereference-when-parsi.patch
Patch7:         backport-libsepol-cil-fix-NULL-pointer-dereference-when-using.patch
Patch8:         backport-libsepol-cil-fix-out-of-bound-read-in-cil_print_recu.patch
Patch9:         backport-libsepol-cil-propagate-failure-of-cil_fill_list.patch

Patch10:        backport-libsepol-cil-Use-CIL_ERR-for-error-messages-in-cil_c.patch
Patch11:        backport-libsepol-cil-Detect-degenerate-inheritance-and-exit-.patch
Patch12:        backport-libsepol-cil-Use-the-macro-NODE-whenever-possible.patch
Patch13:        backport-libsepol-cil-Check-for-duplicate-blocks-optionals-an.patch
Patch14:        backport-libsepol-cil-Refactor-helper-function-for-cil_gen_no.patch
Patch15:        backport-libsepol-cil-Remove-unused-field-from-struct-cil_arg.patch
Patch16:        backport-libsepol-cil-Destroy-disabled-optional-blocks-after-.patch
Patch17:        backport-libsepol-cil-Use-AST-to-track-blocks-and-optionals-w.patch
Patch18:        backport-libsepol-cil-Reorder-checks-for-invalid-rules-when-r.patch
Patch19:        backport-libsepol-cil-replace-printf-with-proper-cil_tree_log.patch
Patch20:        backport-libsepol-cil-introduce-intermediate-cast-to-silence-.patch
Patch21:        backport-libsepol-cil-follow-declaration-after-statement.patch
Patch22:        backport-libsepol-cil-Handle-disabled-optional-blocks-in-earl.patch
Patch23:        backport-libsepol-cil-Allow-duplicate-optional-blocks-in-most.patch
Patch24:        backport-libsepol-cil-Improve-degenerate-inheritance-check.patch
Patch25:        backport-libsepol-cil-Improve-checking-for-bad-inheritance-pa.patch
Patch26:        backport-libsepol-cil-Use-the-macro-FLAVOR-whenever-possible.patch
Patch27:        backport-libsepol-cil-Check-for-empty-list-when-marking-never.patch
Patch28:        backport-libsepol-cil-Fix-instances-where-an-error-returns-SE.patch
Patch29:        backport-libsepol-cil-Limit-the-number-of-open-parenthesis-al.patch
Patch30:        backport-libsepol-cil-Fix-syntax-checking-of-defaultrange-rul.patch
Patch31:        backport-libsepol-cil-Allow-some-duplicate-macro-and-block-de.patch

BuildRequires:  gcc flex

%description
libsepol provides an API for the manipulation of SELinux binary
policies. It is used by checkpolicy (the policy compiler) and similar
tools, as well as by programs like load_policy that need to perform
specific transformations on binary policies such as customizing
policy boolean settings.

%package devel
Summary: Header files and libraries for %{name}
Requires:%{name} = %{version}-%{release}
Provides:%{name}-static = %{version}-%{release}

%description devel
Header files and libraries for %{name}

%package_help

%prep
%autosetup -n %{name}-%{version} -p2

%build
make clean
make %{?_smp_mflags} CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}"

%install
rm -rf %{buildroot}
make DESTDIR="%{buildroot}" LIBDIR="%{_libdir}" SHLIBDIR="%{_libdir}" install

%pre

%preun

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%files
%defattr(-,root,root)
%license COPYING
%{_libdir}/libsepol.so.*

%files devel
%defattr(-,root,root)
%{_includedir}/*
%{_libdir}/*.so
%{_libdir}/pkgconfig/libsepol.pc
%{_libdir}/*.a
%exclude %{_bindir}/chkcon

%files help
%defattr(-,root,root)
%{_mandir}/man8/*
%{_mandir}/ru/man8/*
%{_mandir}/man3/*

%changelog
* Fri Sep 10 2021 panxiaohe <panxiaohe@huawei.com> - 3.1-5
- fix secilc-fuzzer issues

* Fri May 28 2021 panxiaohe <panxiaohe@huawei.com> - 3.1-4
- Drop unnecessary telinit

* Mon Mar 15 2021 yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.1-3
- fix heap-use-after-free in cil_yy_switch_to_buffer
- fix heap-use-after-free in __class_reset_perm_values()
- fix heap-buffer-overflow in cil_print_recursive_blockinherit

* Thu Mar 4 2021 Lirui <lirui130@huawei.com> - 3.1-2
- fix NULL pointer dereference in cil_fill_ipaddr 

* Fri Jul 17 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.1-1
- update to 3.1

* Tue Sep 10 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.9-1
- Package init