From 5bed5470a4478a88f05701e98c6ceaa41049c360 Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni Date: Tue, 9 Sep 2025 14:08:12 +0200 Subject: [PATCH] package/libsepol: bump to version 3.9 Changes: https://github.com/SELinuxProject/selinux/releases/download/3.9/RELEASE-3.9.txt Notable changes for libsepol: * libsepol: Add new 'netif_wildcard' policy capability * libsepol: Allow multiple policycap statements * libsepol: Support genfs_seclabel_wildcard We can drop our patch since SELinux now has an official DISABLE_SHARED variable to do a static-only build (but it needs a 'y' value and not a '1' value like our previous variable needed). Signed-off-by: Thomas Petazzoni Signed-off-by: Julien Olivain --- .checkpackageignore | 1 - .../libsepol/0001-support-static-only.patch | 52 ------------------- package/libsepol/libsepol.hash | 2 +- package/libsepol/libsepol.mk | 4 +- 4 files changed, 3 insertions(+), 56 deletions(-) delete mode 100644 package/libsepol/0001-support-static-only.patch diff --git a/.checkpackageignore b/.checkpackageignore index f45f141d50..d8d0bc6969 100644 --- a/.checkpackageignore +++ b/.checkpackageignore @@ -629,7 +629,6 @@ package/libroxml/0001-src-roxml_mem.h-add-missing-extern.patch lib_patch.Upstrea package/librsvg/0001-gdk-pixbuf-loader-Makefile.am-set-GDK_PIXBUF_MODULED.patch lib_patch.Upstream package/librtlsdr/0001-Makefile.am-respect-DESTDIR-with-install-udev-rules.patch lib_patch.Upstream package/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch lib_patch.Upstream -package/libsepol/0001-support-static-only.patch lib_patch.Upstream package/libserial/0001-SerialPort.cpp-fix-build-when-size_t-is-an-unsigned-.patch lib_patch.Upstream package/libserial/0002-SerialPort.cpp-don-t-use-high-baudrates-when-not-ava.patch lib_patch.Upstream package/libshdata/0001-backend-Add-missing-include-files.patch lib_patch.Upstream diff --git a/package/libsepol/0001-support-static-only.patch b/package/libsepol/0001-support-static-only.patch deleted file mode 100644 index 7a614d7d0d..0000000000 --- a/package/libsepol/0001-support-static-only.patch +++ /dev/null @@ -1,52 +0,0 @@ -From 2140db697c7f1da2a0a3f7bbcb14c1a0dade84e5 Mon Sep 17 00:00:00 2001 -From: Adam Duskett -Date: Wed, 14 May 2025 16:32:53 +0200 -Subject: [PATCH] Add support for static-only build - -Instead of unconditionally building shared libraries, this patch -improves the libsepol build system with a "STATIC" variable, which -when defined to some non-empty value, will disable the build of shared -libraries. It allows to support cases where the target architecture -does not have support for shared libraries. - -Signed-off-by: Thomas Petazzoni -[Updated for 3.8.1] -Signed-off-by: Adam Duskett -Signed-off-by: Fabrice Fontaine -[Update for 2.8] ---- - src/Makefile | 9 ++++++++- - 1 file changed, 8 insertions(+), 1 deletion(-) - -diff --git a/src/Makefile b/src/Makefile -index 71fa3ed..efb81bc 100644 ---- a/src/Makefile -+++ b/src/Makefile -@@ -45,7 +45,12 @@ LDFLAGS += -undefined dynamic_lookup - LN=gln - endif - --all: $(LIBA) $(LIBSO) $(LIBPC) -+ALL_TARGETS = $(LIBA) $(LIBPC) -+ifeq ($(STATIC),) -+ALL_TARGETS += $(LIBSO) -+endif -+ -+all: $(ALL_TARGETS) - - - $(LIBA): $(OBJS) -@@ -87,8 +92,10 @@ endif - install: all - test -d $(DESTDIR)$(LIBDIR) || install -m 755 -d $(DESTDIR)$(LIBDIR) - install -m 644 $(LIBA) $(DESTDIR)$(LIBDIR) -+ifeq ($(STATIC),) - test -d $(DESTDIR)$(SHLIBDIR) || install -m 755 -d $(DESTDIR)$(SHLIBDIR) - install -m 755 $(LIBSO) $(DESTDIR)$(SHLIBDIR) -+endif - test -d $(DESTDIR)$(LIBDIR)/pkgconfig || install -m 755 -d $(DESTDIR)$(LIBDIR)/pkgconfig - install -m 644 $(LIBPC) $(DESTDIR)$(LIBDIR)/pkgconfig - $(LN) -sf --relative $(DESTDIR)$(SHLIBDIR)/$(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET) --- -2.49.0 - diff --git a/package/libsepol/libsepol.hash b/package/libsepol/libsepol.hash index adf7cb86bb..08a1bf0cc2 100644 --- a/package/libsepol/libsepol.hash +++ b/package/libsepol/libsepol.hash @@ -1,5 +1,5 @@ # From: https://github.com/SELinuxProject/selinux/wiki/Releases -sha256 0e78705305f955abd4c0654d37a5477ee26349ab74db9e2b03a7868897ae1ddf libsepol-3.8.1.tar.gz +sha256 ba630b59e50c5fbf9e9dd45eb3734f373cf78d689d8c10c537114c9bd769fa2e libsepol-3.9.tar.gz # Hash for license file sha256 6095e9ffa777dd22839f7801aa845b31c9ed07f3d6bf8a26dc5d2dec8ccc0ef3 LICENSE diff --git a/package/libsepol/libsepol.mk b/package/libsepol/libsepol.mk index 2376ab852d..3e1a275808 100644 --- a/package/libsepol/libsepol.mk +++ b/package/libsepol/libsepol.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBSEPOL_VERSION = 3.8.1 +LIBSEPOL_VERSION = 3.9 LIBSEPOL_SITE = https://github.com/SELinuxProject/selinux/releases/download/$(LIBSEPOL_VERSION) LIBSEPOL_LICENSE = LGPL-2.1+ LIBSEPOL_LICENSE_FILES = LICENSE @@ -17,7 +17,7 @@ HOST_LIBSEPOL_DEPENDENCIES = $(BR2_COREUTILS_HOST_DEPENDENCY) host-flex LIBSEPOL_MAKE_FLAGS = $(TARGET_CONFIGURE_OPTS) ifeq ($(BR2_STATIC_LIBS),y) -LIBSEPOL_MAKE_FLAGS += STATIC=1 +LIBSEPOL_MAKE_FLAGS += DISABLE_SHARED=y endif define LIBSEPOL_BUILD_CMDS