add sechecker targets

diff --git a/refpolicy/Changelog b/refpolicy/Changelog
index dcda94cc1763141dcb50cca1408a8efb89238763..160a73e5be97221d8aa6d037fd28631ef5f80ba0 100644 (file)
--- a/refpolicy/Changelog
+++ b/refpolicy/Changelog
@@ -1,3 +1,4 @@
+- Add targets for sechecker.
 - Updated to sedoctool to read bool files and tunable
   files separately.
 - Changed the xml tag of <boolean> to <bool> to be consistent

diff --git a/refpolicy/Makefile b/refpolicy/Makefile
index 6bcd936d50822dbc83afe5dddf02c8f23d0b74e2..d01f739637fd2fdafee0e7578945ae2edcbbdcf8 100644 (file)
--- a/refpolicy/Makefile
+++ b/refpolicy/Makefile
@@ -77,6 +77,7 @@ LOADPOLICY := $(SBINDIR)/load_policy
 SETFILES := $(SBINDIR)/setfiles
 GENHOMEDIRCON := $(SBINDIR)/genhomedircon
 XMLLINT := $(BINDIR)/xmllint
+SECHECK := $(BINDIR)/sechecker
 
 CFLAGS := -Wall
 

diff --git a/refpolicy/Rules.monolithic b/refpolicy/Rules.monolithic
index 259e287a6da247895abcba7f16e6fbb59ec6d677..830cebe796ec1ce1da5517dec557902b1f444730 100644 (file)
--- a/refpolicy/Rules.monolithic
+++ b/refpolicy/Rules.monolithic
@@ -201,6 +201,16 @@ relabel:  $(FC) $(SETFILES)
        fi
        $(QUIET) $(SETFILES) $(FC) $(FILESYSTEMS)
 
+########################################
+#
+# Run policy source checks
+#
+check: policy.conf $(FC)
+       $(SECHECK) -s --profile=development --policy=policy.conf --fcfile=$(FC) > $@.res
+
+longcheck: policy.conf $(FC)
+       $(SECHECK) -s --profile=all --policy=policy.conf --fcfile=$(FC) > $@.res
+
 ########################################
 #
 # Clean the sources
@@ -210,5 +220,6 @@ clean:
        rm -f policy.conf
        rm -f policy.$(PV)
        rm -f $(FC)
+       rm -f *.res
 
-.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel clean
+.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean