1 # Makefile for AppArmor Linux Security Module
3 obj-
$(CONFIG_SECURITY_APPARMOR
) += apparmor.o
5 apparmor-y
:= apparmorfs.o audit.o capability.o context.o ipc.o lib.o match.o \
6 path.o domain.o policy.o policy_unpack.o procattr.o lsm.o \
7 resource.o secid.o file.o policy_ns.o label.o mount.o net.o
8 apparmor-
$(CONFIG_SECURITY_APPARMOR_HASH
) += crypto.o
10 clean-files
:= capability_names.h rlim_names.h net_names.h
12 # Build a lower case string table of address family names
13 # Transform lines from
14 # #define AF_LOCAL 1 /* POSIX name for AF_UNIX */
15 # #define AF_INET 2 /* Internet IP Protocol */
20 # and build the securityfs entries for the mapping.
21 # Transforms lines from
22 # #define AF_INET 2 /* Internet IP Protocol */
24 # #define AA_SFS_AF_MASK "local inet"
25 quiet_cmd_make-af
= GEN
$@
26 cmd_make-af
= echo
"static const char *address_family_names[] = {" > $@
;\
27 sed
$< >>$@
-r
-n
-e
"/AF_MAX/d" -e
"/AF_LOCAL/d" -e
"/AF_ROUTE/d" -e \
28 's/^\#define[ \t]+AF_([A-Z0-9_]+)[ \t]+([0-9]+)(.*)/[\2] = "\L\1",/p';\
30 printf
'%s' '\#define AA_SFS_AF_MASK "' >> $@
;\
31 sed
-r
-n
-e
"/AF_MAX/d" -e
"/AF_LOCAL/d" -e
"/AF_ROUTE/d" -e \
32 's/^\#define[ \t]+AF_([A-Z0-9_]+)[ \t]+([0-9]+)(.*)/\L\1/p'\
33 $< | tr
'\n' ' ' | sed
-e
's/ $$/"\n/' >> $@
35 # Build a lower case string table of sock type names
36 # Transform lines from
40 quiet_cmd_make-sock
= GEN
$@
41 cmd_make-sock
= echo
"static const char *sock_type_names[] = {" >> $@
;\
43 -e
's/^\tSOCK_([A-Z0-9_]+)[\t]+=[ \t]+([0-9]+)(.*)/[\2] = "\L\1",/p';\
46 # Build a lower case string table of capability names
47 # Transforms lines from
48 # #define CAP_DAC_OVERRIDE 1
50 # [1] = "dac_override",
51 quiet_cmd_make-caps
= GEN
$@
52 cmd_make-caps
= echo
"static const char *const capability_names[] = {" > $@
;\
53 sed
$< >>$@
-r
-n
-e
'/CAP_FS_MASK/d' \
54 -e
's/^\#define[ \t]+CAP_([A-Z0-9_]+)[ \t]+([0-9]+)/[\2] = "\L\1",/p';\
56 printf
'%s' '\#define AA_SFS_CAPS_MASK "' >> $@
;\
57 sed
$< -r
-n
-e
'/CAP_FS_MASK/d' \
58 -e
's/^\#define[ \t]+CAP_([A-Z0-9_]+)[ \t]+([0-9]+)/\L\1/p' | \
59 tr
'\n' ' ' | sed
-e
's/ $$/"\n/' >> $@
62 # Build a lower case string table of rlimit names.
63 # Transforms lines from
64 # #define RLIMIT_STACK 3 /* max stack size */
66 # [RLIMIT_STACK] = "stack",
68 # and build a second integer table (with the second sed cmd), that maps
69 # RLIMIT defines to the order defined in asm-generic/resource.h This is
70 # required by policy load to map policy ordering of RLIMITs to internal
71 # ordering for architectures that redefine an RLIMIT.
72 # Transforms lines from
73 # #define RLIMIT_STACK 3 /* max stack size */
77 # and build the securityfs entries for the mapping.
78 # Transforms lines from
79 # #define RLIMIT_FSIZE 1 /* Maximum filesize */
80 # #define RLIMIT_STACK 3 /* max stack size */
82 # #define AA_SFS_RLIMIT_MASK "fsize stack"
83 quiet_cmd_make-rlim
= GEN
$@
84 cmd_make-rlim
= echo
"static const char *const rlim_names[RLIM_NLIMITS] = {" \
87 -e
's/^\# ?define[ \t]+(RLIMIT_([A-Z0-9_]+)).*/[\1] = "\L\2",/p';\
89 echo
"static const int rlim_map[RLIM_NLIMITS] = {" >> $@
;\
90 sed
-r
-n
"s/^\# ?define[ \t]+(RLIMIT_[A-Z0-9_]+).*/\1,/p" $< >> $@
;\
92 printf
'%s' '\#define AA_SFS_RLIMIT_MASK "' >> $@
;\
93 sed
-r
-n
's/^\# ?define[ \t]+RLIMIT_([A-Z0-9_]+).*/\L\1/p' $< | \
94 tr
'\n' ' ' | sed
-e
's/ $$/"\n/' >> $@
96 $(obj
)/capability.o
: $(obj
)/capability_names.h
97 $(obj
)/net.o
: $(obj
)/net_names.h
98 $(obj
)/resource.o
: $(obj
)/rlim_names.h
99 $(obj
)/capability_names.h
: $(srctree
)/include/uapi
/linux
/capability.h \
101 $(call cmd
,make-caps
)
102 $(obj
)/rlim_names.h
: $(srctree
)/include/uapi
/asm-generic
/resource.h \
104 $(call cmd
,make-rlim
)
105 $(obj
)/net_names.h
: $(srctree
)/include/linux
/socket.h \
106 $(srctree
)/include/linux
/net.h \
109 $(call cmd
,make-sock
)