postgresql/contrib/sepgsql/Makefile

# contrib/sepgsql/Makefile

MODULE_big = sepgsql
OBJS = hooks.o selinux.o uavc.o label.o dml.o \
	database.o schema.o relation.o proc.o $(WIN32RES)
DATA_built = sepgsql.sql
PGFILEDESC = "sepgsql - SELinux integration"

# Note: because we don't tell the Makefile there are any regression tests,
# we have to clean those result files explicitly
EXTRA_CLEAN = -r $(pg_regress_clean_files) tmp/ *.pp sepgsql-regtest.if sepgsql-regtest.fc

ifdef USE_PGXS
PG_CONFIG = pg_config
PGXS := $(shell $(PG_CONFIG) --pgxs)
include $(PGXS)
else
subdir = contrib/sepgsql
top_builddir = ../..
include $(top_builddir)/src/Makefile.global
include $(top_srcdir)/contrib/contrib-global.mk
endif

SHLIB_LINK += -lselinux
sepgsql, an SE-Linux integration for PostgreSQL This is still pretty rough - among other things, the documentation needs work, and the messages need a visit from the style police - but this gets the basic framework in place. KaiGai Kohei 2011-01-24 09:44:48 +08:00			`# contrib/sepgsql/Makefile`

			`MODULE_big = sepgsql`
Userspace access vector cache for contrib/sepgsql. KaiGai Kohei 2011-09-01 20:37:33 +08:00			`OBJS = hooks.o selinux.o uavc.o label.o dml.o \`
Add file version information to most installed Windows binaries. Prominent binaries already had this metadata. A handful of minor binaries, such as pg_regress.exe, still lack it; efforts to eliminate such exceptions are welcome. Michael Paquier, reviewed by MauMau. 2014-07-15 02:07:52 +08:00			`database.o schema.o relation.o proc.o $(WIN32RES)`
Remove rule to build sepgsql-regtest.pp. Instead, document how to build it manually. Per discussion. KaiGai Kohei, with some wordsmithing by me. 2011-02-17 19:39:13 +08:00			`DATA_built = sepgsql.sql`
Add file version information to most installed Windows binaries. Prominent binaries already had this metadata. A handful of minor binaries, such as pg_regress.exe, still lack it; efforts to eliminate such exceptions are welcome. Michael Paquier, reviewed by MauMau. 2014-07-15 02:07:52 +08:00			`PGFILEDESC = "sepgsql - SELinux integration"`
Fix pgxs.mk to always add --dbname=$(CONTRIB_TESTDB) to REGRESS_OPTS. The previous coding resulted in contrib modules unintentionally overriding the use of CONTRIB_TESTDB. There seems no particularly good reason to allow that (after all, the makefile can set CONTRIB_TESTDB if that's really what it intends). In passing, document REGRESS_OPTS where the other pgxs.mk options are documented. Back-patch to 9.1 --- in prior versions, there were no cases of contrib modules setting REGRESS_OPTS without including the --dbname switch, so while the coding was fragile there was no actual bug. 2011-08-25 03:16:17 +08:00
Take sepgsql regression tests out of the regular regression test mechanism. Because these tests require root privileges, not to mention invasive changes to the security configuration of the host system, it's not reasonable for them to be invoked by a regular "make check" or "make installcheck". Instead, dike out the Makefile's knowledge of the tests, and change chkselinuxenv (now renamed "test_sepgsql") into a script that verifies the environment is workable and then runs the tests. It's expected that test_sepgsql will only be run manually. While at it, do some cleanup in the error checking in the script, and do some wordsmithing in the documentation. 2011-09-28 08:07:15 +08:00			`# Note: because we don't tell the Makefile there are any regression tests,`
			`# we have to clean those result files explicitly`
			`EXTRA_CLEAN = -r $(pg_regress_clean_files) tmp/ *.pp sepgsql-regtest.if sepgsql-regtest.fc`
sepgsql, an SE-Linux integration for PostgreSQL This is still pretty rough - among other things, the documentation needs work, and the messages need a visit from the style police - but this gets the basic framework in place. KaiGai Kohei 2011-01-24 09:44:48 +08:00
			`ifdef USE_PGXS`
			`PG_CONFIG = pg_config`
			`PGXS := $(shell $(PG_CONFIG) --pgxs)`
			`include $(PGXS)`
			`else`
			`subdir = contrib/sepgsql`
			`top_builddir = ../..`
			`include $(top_builddir)/src/Makefile.global`
			`include $(top_srcdir)/contrib/contrib-global.mk`
			`endif`

Fix contrib/sepgsql and contrib/xml2 to always link required libraries. contrib/xml2 can get by without libxslt; the relevant features just won't work. But if doesn't have libxml2, or if sepgsql doesn't have libselinux, the link succeeds but the module then fails to work at load time. To avoid that, link the require libraries unconditionally, so that it will be clear at link-time that there is a problem. Per discussion with Tom Lane and KaiGai Kohei. 2011-08-19 23:57:38 +08:00			`SHLIB_LINK += -lselinux`