18c2ecf20Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0 28c2ecf20Sopenharmony_ci# 38c2ecf20Sopenharmony_ci# Makefile for building the SELinux module as part of the kernel tree. 48c2ecf20Sopenharmony_ci# 58c2ecf20Sopenharmony_ci 68c2ecf20Sopenharmony_ciobj-$(CONFIG_SECURITY_SELINUX) := selinux.o 78c2ecf20Sopenharmony_ci 88c2ecf20Sopenharmony_ciselinux-y := avc.o hooks.o selinuxfs.o netlink.o nlmsgtab.o netif.o \ 98c2ecf20Sopenharmony_ci netnode.o netport.o status.o \ 108c2ecf20Sopenharmony_ci ss/ebitmap.o ss/hashtab.o ss/symtab.o ss/sidtab.o ss/avtab.o \ 118c2ecf20Sopenharmony_ci ss/policydb.o ss/services.o ss/conditional.o ss/mls.o ss/context.o 128c2ecf20Sopenharmony_ci 138c2ecf20Sopenharmony_ciselinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfrm.o 148c2ecf20Sopenharmony_ci 158c2ecf20Sopenharmony_ciselinux-$(CONFIG_NETLABEL) += netlabel.o 168c2ecf20Sopenharmony_ci 178c2ecf20Sopenharmony_ciselinux-$(CONFIG_SECURITY_INFINIBAND) += ibpkey.o 188c2ecf20Sopenharmony_ci 198c2ecf20Sopenharmony_ciccflags-y := -I$(srctree)/security/selinux -I$(srctree)/security/selinux/include 208c2ecf20Sopenharmony_ci 218c2ecf20Sopenharmony_ci$(addprefix $(obj)/,$(selinux-y)): $(obj)/flask.h 228c2ecf20Sopenharmony_ci 238c2ecf20Sopenharmony_ciquiet_cmd_flask = GEN $(obj)/flask.h $(obj)/av_permissions.h 248c2ecf20Sopenharmony_ci cmd_flask = $< $(obj)/flask.h $(obj)/av_permissions.h 258c2ecf20Sopenharmony_ci 268c2ecf20Sopenharmony_citargets += flask.h av_permissions.h 278c2ecf20Sopenharmony_ci# once make >= 4.3 is required, we can use grouped targets in the rule below, 288c2ecf20Sopenharmony_ci# which basically involves adding both headers and a '&' before the colon, see 298c2ecf20Sopenharmony_ci# the example below: 308c2ecf20Sopenharmony_ci# $(obj)/flask.h $(obj)/av_permissions.h &: scripts/selinux/... 318c2ecf20Sopenharmony_ci$(obj)/flask.h: scripts/selinux/genheaders/genheaders FORCE 328c2ecf20Sopenharmony_ci $(call if_changed,flask) 33