nixpkgs/pkgs/os-specific/linux/checkpolicy/default.nix
2017-11-07 15:27:53 +01:00

34 lines
792 B
Nix

{ stdenv, fetchurl, bison, flex, libsepol }:
stdenv.mkDerivation rec {
name = "checkpolicy-${version}";
version = "2.4";
inherit (libsepol) se_release se_url;
src = fetchurl {
url = "${se_url}/${se_release}/checkpolicy-${version}.tar.gz";
sha256 = "1m5wjm43lzp6bld8higsvdm2dkddydihhwv9qw2w9r4dm0largcv";
};
# Don't build tests
postPatch = ''
sed '/-C test/d' -i Makefile
sed '1i#include <ctype.h>' -i checkpolicy.c
'';
nativeBuildInputs = [ bison flex ];
buildInputs = [ libsepol ];
NIX_CFLAGS_COMPILE = "-fstack-protector-all";
preBuild = ''
makeFlagsArray+=("LEX=flex")
makeFlagsArray+=("LIBDIR=${libsepol}/lib")
makeFlagsArray+=("PREFIX=$out")
'';
meta = libsepol.meta // {
description = "SELinux policy compiler";
};
}