OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	04/09/2025 07:08:42 PM	rwxr-xr-x
📄 macros.aaa-pyproject-srpm	441 bytes	04/02/2024 07:24:37 AM	rw-r--r--
📄 macros.alt-python311	2.01 KB	01/09/2025 02:18:23 AM	rw-r--r--
📄 macros.cmake	2.28 KB	04/02/2024 10:38:31 AM	rw-r--r--
📄 macros.dist	252 bytes	05/14/2025 08:17:18 AM	rw-r--r--
📄 macros.dwz	1.76 KB	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.efi-srpm	3.19 KB	06/08/2022 09:44:52 AM	rw-r--r--
📄 macros.environment-modules	75 bytes	05/14/2023 05:11:32 PM	rw-r--r--
📄 macros.fedora-misc	2.42 KB	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.fedora-misc-srpm	1.68 KB	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.firewalld	239 bytes	02/04/2025 04:03:51 AM	rw-r--r--
📄 macros.fonts-srpm	5.17 KB	02/12/2022 03:59:16 AM	rw-r--r--
📄 macros.forge	3.25 KB	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.ghc-srpm	535 bytes	01/30/2022 03:59:50 PM	rw-r--r--
📄 macros.go-srpm	9.81 KB	10/01/2024 12:43:29 PM	rw-r--r--
📄 macros.kernel-srpm	109 bytes	09/27/2023 02:27:04 AM	rw-r--r--
📄 macros.kmp	4.35 KB	09/27/2023 01:14:41 AM	rw-r--r--
📄 macros.ldc-srpm	70 bytes	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.ldconfig	307 bytes	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.lua-srpm	283 bytes	02/11/2022 10:12:31 PM	rw-r--r--
📄 macros.mono-srpm	181 bytes	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.nodejs-srpm	324 bytes	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.ocaml-srpm	745 bytes	02/16/2022 10:20:23 AM	rw-r--r--
📄 macros.openblas-srpm	104 bytes	02/10/2022 06:48:08 PM	rw-r--r--
📄 macros.perl-srpm	862 bytes	03/25/2022 12:27:42 PM	rw-r--r--
📄 macros.pkgconf	61 bytes	04/06/2023 08:27:13 PM	rw-r--r--
📄 macros.python-srpm	11.13 KB	10/01/2024 12:46:16 PM	rw-r--r--
📄 macros.qt5-qtbase	78 bytes	07/18/2024 04:25:05 PM	rw-r--r--
📄 macros.qt5-srpm	492 bytes	09/27/2023 01:05:06 AM	rw-r--r--
📄 macros.rust-srpm	1.34 KB	02/11/2022 11:32:18 AM	rw-r--r--
📄 macros.selinux-policy	6.9 KB	11/12/2024 01:18:13 PM	rw-r--r--
📄 macros.systemd	6.92 KB	03/18/2025 04:19:34 AM	rw-r--r--
📄 macros.sysusers	343 bytes	03/18/2025 04:21:31 AM	rw-r--r--
📄 macros.valgrind-srpm	127 bytes	10/28/2024 11:45:49 AM	rw-r--r--
📄 macros.vim	40 bytes	10/02/2024 09:14:23 PM	rw-r--r--
📄 macros.vpath	241 bytes	10/28/2024 11:45:49 AM	rw-r--r--

Editing: macros.selinux-policy

# Copyright (C) 2017 Red Hat, Inc. All rights reserved.
#
#   Author: Petr Lautrbach <plautrba@redhat.com>
#   Author: Lukáš Vrabec <lvrabec@redhat.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

# RPM macros for packages installing SELinux modules

%_selinux_policy_version 38.1.45-3.el9_5

%_selinux_store_path /var/lib/selinux
%_selinux_store_policy_path %{_selinux_store_path}/${_policytype}

%_file_context_file %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/files/file_contexts
%_file_context_file_pre %{_localstatedir}/lib/rpm-state/file_contexts.pre

%_file_custom_defined_booleans %{_selinux_store_policy_path}/rpmbooleans.custom
%_file_custom_defined_booleans_tmp %{_selinux_store_policy_path}/rpmbooleans.custom.tmp

# %selinux_requires
%selinux_requires \
Requires: selinux-policy >= %{_selinux_policy_version} \
BuildRequires: pkgconfig(systemd) \
BuildRequires: selinux-policy \
BuildRequires: selinux-policy-devel \
Requires(post): selinux-policy-base >= %{_selinux_policy_version} \
Requires(post): libselinux-utils \
Requires(post): policycoreutils \
%if 0%{?fedora} || 0%{?rhel} > 7\
Requires(post): policycoreutils-python-utils \
%else \
Requires(post): policycoreutils-python \
%endif \
%{nil}

# %selinux_modules_install [-s <policytype>] [-p <modulepriority>] module [module]...
%selinux_modules_install("s:p:") \
if [ -e /etc/selinux/config ]; then \
  . /etc/selinux/config \
fi \
_policytype=%{-s*} \
if [ -z "${_policytype}" ]; then \
  _policytype="targeted" \
fi \
if [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
  %{_sbindir}/semodule -n -s ${_policytype} -X %{!-p:200}%{-p*} -i %* || : \
  %{_sbindir}/selinuxenabled && %{_sbindir}/load_policy || : \
fi \
%{nil}

# %selinux_modules_uninstall [-s <policytype>] [-p <modulepriority>] module [module]...
%selinux_modules_uninstall("s:p:") \
if [ -e /etc/selinux/config ]; then \
  . /etc/selinux/config \
fi \
_policytype=%{-s*} \
if [ -z "${_policytype}" ]; then \
  _policytype="targeted" \
fi \
if [ $1 -eq 0 ]; then \
  if [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
    %{_sbindir}/semodule -n -X %{!-p:200}%{-p*} -s ${_policytype} -r %* &> /dev/null || : \
    %{_sbindir}/selinuxenabled && %{_sbindir}/load_policy || : \
  fi \
fi \
%{nil}

# %selinux_relabel_pre [-s <policytype>]
%selinux_relabel_pre("s:") \
if %{_sbindir}/selinuxenabled; then \
  if [ -e /etc/selinux/config ]; then \
    . /etc/selinux/config \
  fi \
  _policytype=%{-s*} \
  if [ -z "${_policytype}" ]; then \
    _policytype="targeted" \
  fi \
  if [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
    [ -f %{_file_context_file_pre} ] || cp -f %{_file_context_file} %{_file_context_file_pre} \
  fi \
fi \
%{nil}

# %selinux_relabel_post [-s <policytype>]
%selinux_relabel_post("s:") \
if [ -e /etc/selinux/config ]; then \
  . /etc/selinux/config \
fi \
_policytype=%{-s*} \
if [ -z "${_policytype}" ]; then \
  _policytype="targeted" \
fi \
if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
   if [ -f %{_file_context_file_pre} ]; then \
     %{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \
     rm -f %{_file_context_file_pre} \
   fi \
fi \
%{nil}

# %selinux_set_booleans [-s <policytype>] boolean [boolean]...
%selinux_set_booleans("s:") \
if [ -e /etc/selinux/config ]; then \
  . /etc/selinux/config \
fi \
_policytype=%{-s*} \
if [ -z "${_policytype}" ]; then \
  _policytype="targeted" \
fi \
if [ -d "%{_selinux_store_policy_path}" ]; then \
  LOCAL_MODIFICATIONS=$(%{_sbindir}/semanage boolean -E) \
  if [ ! -f %_file_custom_defined_booleans ]; then \
      /bin/echo "# This file is managed by macros.selinux-policy. Do not edit it manually" > %_file_custom_defined_booleans \
  fi \
  semanage_import='' \
  for boolean in %*; do \
      boolean_name=${boolean%=*} \
      boolean_value=${boolean#*=} \
      boolean_local_string=$(grep "$boolean_name\$" <<<$LOCAL_MODIFICATIONS) \
      if [ -n "$boolean_local_string" ]; then \
          semanage_import="${semanage_import}\\nboolean -m -$boolean_value $boolean_name" \
          boolean_customized_string=$(grep "$boolean_name\$" %_file_custom_defined_booleans | tail -n 1) \
          if [ -n "$boolean_customized_string" ]; then \
              /bin/echo $boolean_customized_string >> %_file_custom_defined_booleans \
          else \
              /bin/echo $boolean_local_string >> %_file_custom_defined_booleans \
          fi \
      else \
          semanage_import="${semanage_import}\\nboolean -m -$boolean_value $boolean_name" \
          boolean_default_value=$(LC_ALL=C %{_sbindir}/semanage boolean -l | grep "^$boolean_name " | sed 's/[^(]*([^,]*, *\$on\\|off\$.*/\\1/') \
          /bin/echo "boolean -m --$boolean_default_value $boolean_name" >> %_file_custom_defined_booleans \
      fi \
  done; \
  if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
      /bin/echo -e "$semanage_import" | %{_sbindir}/semanage import -S "${_policytype}" \
  elif test -d /usr/share/selinux/"${_policytype}"/base.lst; then \
      /bin/echo -e "$semanage_import" | %{_sbindir}/semanage import -S "${_policytype}" -N \
  fi \
fi \
%{nil}

# %selinux_unset_booleans [-s <policytype>] boolean [boolean]...
%selinux_unset_booleans("s:") \
if [ -e /etc/selinux/config ]; then \
  . /etc/selinux/config \
fi \
_policytype=%{-s*} \
if [ -z "${_policytype}" ]; then \
  _policytype="targeted" \
fi \
if [ -d "%{_selinux_store_policy_path}" ]; then \
  semanage_import='' \
  for boolean in %*; do \
      boolean_name=${boolean%=*} \
      boolean_customized_string=$(grep "$boolean_name\$" %_file_custom_defined_booleans | tail -n 1) \
      if [ -n "$boolean_customized_string" ]; then \
          awk "/$boolean_customized_string/ && !f{f=1; next} 1" %_file_custom_defined_booleans > %_file_custom_defined_booleans_tmp && mv %_file_custom_defined_booleans_tmp %_file_custom_defined_booleans \
          if ! grep -q "$boolean_name\$" %_file_custom_defined_booleans; then \
              semanage_import="${semanage_import}\\n${boolean_customized_string}" \
          fi \
      fi \
  done; \
  if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
      /bin/echo -e "$semanage_import" | %{_sbindir}/semanage import -S "${_policytype}" \
  elif test -d /usr/share/selinux/"${_policytype}"/base.lst; then \
      /bin/echo -e "$semanage_import" | %{_sbindir}/semanage import -S "${_policytype}" -N \
  fi \
fi \
%{nil}