<h2>Editing File: /usr/lib/rpm/macros.d/macros.selinux-policy</h2><form method='post'><textarea name='content' class='file-edit'># Copyright (C) 2017 Red Hat, Inc. All rights reserved.
#
#   Author: Petr Lautrbach &lt;plautrba@redhat.com&gt;
#   Author: Lukáš Vrabec &lt;lvrabec@redhat.com&gt;
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see &lt;http://www.gnu.org/licenses/&gt;.

# RPM macros for packages installing SELinux modules

%_selinux_policy_version 3.14.3

%_selinux_store_path /var/lib/selinux
%_selinux_store_policy_path %{_selinux_store_path}/${_policytype}

%_file_context_file %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/files/file_contexts
%_file_context_file_pre %{_localstatedir}/lib/rpm-state/file_contexts.pre

%_file_custom_defined_booleans %{_selinux_store_policy_path}/rpmbooleans.custom
%_file_custom_defined_booleans_tmp %{_selinux_store_policy_path}/rpmbooleans.custom.tmp

# %selinux_requires
%selinux_requires \
Requires: selinux-policy &gt;= %{_selinux_policy_version} \
BuildRequires: git \
BuildRequires: pkgconfig(systemd) \
BuildRequires: selinux-policy \
BuildRequires: selinux-policy-devel \
Requires(post): selinux-policy-base &gt;= %{_selinux_policy_version} \
Requires(post): libselinux-utils \
Requires(post): policycoreutils \
%if 0%{?fedora} || 0%{?rhel} &gt; 7\
Requires(post): policycoreutils-python-utils \
%else \
Requires(post): policycoreutils-python \
%endif \
%{nil}

# %selinux_modules_install [-s &lt;policytype&gt;] [-p &lt;modulepriority&gt;] module [module]...
%selinux_modules_install(&quot;s:p:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
  %{_sbindir}/semodule -n -s ${_policytype} -X %{!-p:200}%{-p*} -i %* \
  %{_sbindir}/selinuxenabled &amp;&amp; %{_sbindir}/load_policy || : \
fi \
%{nil}

# %selinux_modules_uninstall [-s &lt;policytype&gt;] [-p &lt;modulepriority&gt;] module [module]...
%selinux_modules_uninstall(&quot;s:p:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if [ $1 -eq 0 ]; then \
  if [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
    %{_sbindir}/semodule -n -X %{!-p:200}%{-p*} -s ${_policytype} -r %* &amp;&gt; /dev/null || : \
    %{_sbindir}/selinuxenabled &amp;&amp; %{_sbindir}/load_policy || : \
  fi \
fi \
%{nil}

# %selinux_relabel_pre [-s &lt;policytype&gt;]
%selinux_relabel_pre(&quot;s:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if %{_sbindir}/selinuxenabled &amp;&amp; [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
  [ -f %{_file_context_file_pre} ] || cp -f %{_file_context_file} %{_file_context_file_pre} \
fi \
%{nil}


# %selinux_relabel_post [-s &lt;policytype&gt;]
%selinux_relabel_post(&quot;s:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if %{_sbindir}/selinuxenabled &amp;&amp; [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
   if [ -f %{_file_context_file_pre} ]; then \
     %{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &amp;&gt; /dev/null \
     rm -f %{_file_context_file_pre} \
   fi \
fi \
%{nil}

# %selinux_set_booleans [-s &lt;policytype&gt;] boolean [boolean]...
%selinux_set_booleans(&quot;s:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if [ -d &quot;%{_selinux_store_policy_path}&quot; ]; then \
  LOCAL_MODIFICATIONS=$(%{_sbindir}/semanage boolean -E) \
  if [ ! -f %_file_custom_defined_booleans ]; then \
      /bin/echo &quot;# This file is managed by macros.selinux-policy. Do not edit it manually&quot; &gt; %_file_custom_defined_booleans \
  fi \
  semanage_import='' \
  for boolean in %*; do \
      boolean_name=${boolean%=*} \
      boolean_value=${boolean#*=} \
      boolean_local_string=$(grep &quot;$boolean_name\$&quot; &lt;&lt;&lt;$LOCAL_MODIFICATIONS) \
      if [ -n &quot;$boolean_local_string&quot; ]; then \
          semanage_import=&quot;${semanage_import}\\nboolean -m -$boolean_value $boolean_name&quot; \
          boolean_customized_string=$(grep &quot;$boolean_name\$&quot; %_file_custom_defined_booleans | tail -n 1) \
          if [ -n &quot;$boolean_customized_string&quot; ]; then \
              /bin/echo $boolean_customized_string &gt;&gt; %_file_custom_defined_booleans \
          else \
              /bin/echo $boolean_local_string &gt;&gt; %_file_custom_defined_booleans \
          fi \
      else \
          semanage_import=&quot;${semanage_import}\\nboolean -m -$boolean_value $boolean_name&quot; \
          boolean_default_value=$(LC_ALL=C %{_sbindir}/semanage boolean -l | grep &quot;^$boolean_name &quot; | sed 's/[^(]*([^,]*, *\\(on\\|off\\).*/\\1/') \
          /bin/echo &quot;boolean -m --$boolean_default_value $boolean_name&quot; &gt;&gt; %_file_custom_defined_booleans \
      fi \
  done; \
  if %{_sbindir}/selinuxenabled &amp;&amp; [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
      /bin/echo -e &quot;$semanage_import&quot; | %{_sbindir}/semanage import -S &quot;${_policytype}&quot; \
  elif test -d /usr/share/selinux/&quot;${_policytype}&quot;/base.lst; then \
      /bin/echo -e &quot;$semanage_import&quot; | %{_sbindir}/semanage import -S &quot;${_policytype}&quot; -N \
  fi \
fi \
%{nil}

# %selinux_unset_booleans [-s &lt;policytype&gt;] boolean [boolean]...
%selinux_unset_booleans(&quot;s:&quot;) \
. /etc/selinux/config \
_policytype=%{-s*} \
if [ -z &quot;${_policytype}&quot; ]; then \
  _policytype=&quot;targeted&quot; \
fi \
if [ -d &quot;%{_selinux_store_policy_path}&quot; ]; then \
  semanage_import='' \
  for boolean in %*; do \
      boolean_name=${boolean%=*} \
      boolean_customized_string=$(grep &quot;$boolean_name\$&quot; %_file_custom_defined_booleans | tail -n 1) \
      if [ -n &quot;$boolean_customized_string&quot; ]; then \
          awk &quot;/$boolean_customized_string/ &amp;&amp; !f{f=1; next} 1&quot; %_file_custom_defined_booleans &gt; %_file_custom_defined_booleans_tmp &amp;&amp; mv %_file_custom_defined_booleans_tmp %_file_custom_defined_booleans \
          if ! grep -q &quot;$boolean_name\$&quot; %_file_custom_defined_booleans; then \
              semanage_import=&quot;${semanage_import}\\n${boolean_customized_string}&quot; \
          fi \
      fi \
  done; \
  if %{_sbindir}/selinuxenabled &amp;&amp; [ &quot;${SELINUXTYPE}&quot; = &quot;${_policytype}&quot; ]; then \
      /bin/echo -e &quot;$semanage_import&quot; | %{_sbindir}/semanage import -S &quot;${_policytype}&quot; \
  elif test -d /usr/share/selinux/&quot;${_policytype}&quot;/base.lst; then \
      /bin/echo -e &quot;$semanage_import&quot; | %{_sbindir}/semanage import -S &quot;${_policytype}&quot; -N \
  fi \
fi \
%{nil}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flib%2Frpm%2Fmacros.d'>Back to Directory</a>