ACIL FM

Nama	Ukuran	Aksi
__pycache__	-	Open
boolean.py	1.15 MB	View DL Edit
etc_rw.py	3.76 MB	View DL Edit
executable.py	9.66 MB	View DL Edit
network.py	13.28 MB	View DL Edit
rw.py	3.84 MB	View DL Edit
script.py	4.16 MB	View DL Edit
semodule.py	1.28 MB	View DL Edit
spec.py	2.35 MB	View DL Edit
test_module.py	4.34 MB	View DL Edit
tmp.py	3.38 MB	View DL Edit
unit_file.py	2.21 MB	View DL Edit
user.py	4.32 MB	View DL Edit
var_cache.py	4.05 MB	View DL Edit
var_lib.py	4.2 MB	View DL Edit
var_log.py	3.18 MB	View DL Edit
var_run.py	2.86 MB	View DL Edit
var_spool.py	4.04 MB	View DL Edit
__init__.py	724 B	View DL Edit

Edit file: /lib/python3.9/site-packages/sepolicy/templates/spec.py

header_comment_section="""\
# vim: sw=4:ts=4:et
"""

base_section="""\

%define selinux_policyver VERSION

Name:   MODULENAME_selinux
Version:	1.0
Release:	1%{?dist}
Summary:	SELinux policy module for MODULENAME

Group:	System Environment/Base
License:	GPLv2+
# This is an example. You will need to change it.
# For a complete guide on packaging your policy
# see https://fedoraproject.org/wiki/SELinux/IndependentPolicy
URL:		http://HOSTNAME
Source0:	MODULENAME.pp
Source1:	MODULENAME.if
Source2:	DOMAINNAME_selinux.8
Source3:	DOMAINNAME_u

Requires: policycoreutils-python-utils, libselinux-utils
Requires(post): selinux-policy-base >= %{selinux_policyver}, policycoreutils-python-utils
Requires(postun): policycoreutils-python-utils
"""

mid_section="""\
BuildArch: noarch

%description
This package installs and sets up the  SELinux policy security module for MODULENAME.

%install
install -d %{buildroot}%{_datadir}/selinux/packages
install -m 644 %{SOURCE0} %{buildroot}%{_datadir}/selinux/packages
install -d %{buildroot}%{_datadir}/selinux/devel/include/contrib
install -m 644 %{SOURCE1} %{buildroot}%{_datadir}/selinux/devel/include/contrib/
install -d %{buildroot}%{_mandir}/man8/
install -m 644 %{SOURCE2} %{buildroot}%{_mandir}/man8/DOMAINNAME_selinux.8
install -d %{buildroot}/etc/selinux/targeted/contexts/users/
install -m 644 %{SOURCE3} %{buildroot}/etc/selinux/targeted/contexts/users/DOMAINNAME_u

%post
semodule -n -i %{_datadir}/selinux/packages/MODULENAME.pp
# Add the new user defined in DOMAINNAME_u only when the package is installed (not during updates)
if [ $1 -eq 1 ]; then
    /usr/sbin/semanage user -a -R DOMAINNAME_r DOMAINNAME_u
fi
if /usr/sbin/selinuxenabled ; then
    /usr/sbin/load_policy
    %relabel_files
fi;
exit 0

%postun
if [ $1 -eq 0 ]; then
    /usr/sbin/semanage user -d DOMAINNAME_u
    semodule -n -r MODULENAME
    if /usr/sbin/selinuxenabled ; then
       /usr/sbin/load_policy
       %relabel_files
    fi;
fi;
exit 0

%files
%attr(0600,root,root) %{_datadir}/selinux/packages/MODULENAME.pp
%{_datadir}/selinux/devel/include/contrib/MODULENAME.if
%{_mandir}/man8/DOMAINNAME_selinux.8.*
/etc/selinux/targeted/contexts/users/DOMAINNAME_u

%changelog
* TODAYSDATE YOUR NAME <YOUR@EMAILADDRESS> 1.0-1
- Initial version

"""

define_relabel_files_begin ="""\
\n
%define relabel_files() \\
"""

define_relabel_files_end ="""\
restorecon -R FILENAME; \\
"""

Batal