34 lines
792 B
Nix
34 lines
792 B
Nix
{ stdenv, fetchurl, bison, flex, libsepol }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "checkpolicy-${version}";
|
|
version = "2.4";
|
|
inherit (libsepol) se_release se_url;
|
|
|
|
src = fetchurl {
|
|
url = "${se_url}/${se_release}/checkpolicy-${version}.tar.gz";
|
|
sha256 = "1m5wjm43lzp6bld8higsvdm2dkddydihhwv9qw2w9r4dm0largcv";
|
|
};
|
|
|
|
# Don't build tests
|
|
postPatch = ''
|
|
sed '/-C test/d' -i Makefile
|
|
sed '1i#include <ctype.h>' -i checkpolicy.c
|
|
'';
|
|
|
|
nativeBuildInputs = [ bison flex ];
|
|
buildInputs = [ libsepol ];
|
|
|
|
NIX_CFLAGS_COMPILE = "-fstack-protector-all";
|
|
|
|
preBuild = ''
|
|
makeFlagsArray+=("LEX=flex")
|
|
makeFlagsArray+=("LIBDIR=${libsepol}/lib")
|
|
makeFlagsArray+=("PREFIX=$out")
|
|
'';
|
|
|
|
meta = libsepol.meta // {
|
|
description = "SELinux policy compiler";
|
|
};
|
|
}
|