selinux: add packages.

[Redbeanw44602]

(selinux)

• libsepol
• libselinux
• libsemanage
  • audit
    • libcap-ng
    • openldap (fixes, openldap: fix & upgrade to 2.6.9 #8110)
    • krb5 (fixes, krb5: fix build & upgrade to 1.22.1 #8125)
• checkpolicy
• secilc
• policycoreutils

[star-hengxing]

/gemini summary

[gemini-code-assist]

Summary of Changes

This pull request significantly expands the project's package definitions by integrating a comprehensive set of SELinux components. It introduces xmake.lua files for core SELinux libraries, policy compilers, and utilities, enabling their proper build, dependency management, and installation within the system. This enhancement streamlines the inclusion and configuration of SELinux functionalities.

Highlights

• New SELinux Package Definitions: Introduced new xmake.lua package definitions for a comprehensive suite of SELinux-related components, including libsepol, libselinux, libsemanage, audit, checkpolicy, secilc, and policycoreutils.
• Configurable Build Options: Each new package definition includes various configurable build options and conditional dependencies, allowing for flexible compilation based on desired features (e.g., openldap for audit, pcre2 for libselinux).
• Build System Integration: The xmake.lua files define how these packages are built and installed, incorporating standard build tools like autoconf and make, along with necessary CFLAGS and LDFLAGS adjustments for proper linking.
• Dependency Management Refinement: Updated scripts/test.lua to remove libselinux from the locked_packages list, indicating its transition to being managed through its newly defined package.

Changelog

• packages/a/audit/xmake.lua
  • Added a new package definition for audit, including its source URLs, version, configurable options (e.g., listener, zos_remote, libcap_ng), and build logic using autoconf.
• packages/c/checkpolicy/xmake.lua
  • Added a new package definition for checkpolicy, the SELinux policy compiler, specifying its homepage, description, version, and dependencies like flex, bison, libsepol, and libselinux.
• packages/l/libcap-ng/xmake.lua
  • Added a new package definition for libcap-ng, a library for POSIX capabilities, detailing its source, version, and build options including utility compilation.
• packages/l/libselinux/xmake.lua
  • Added a new package definition for libselinux, the core SELinux library, with its source, version, dependencies (libsepol, pcre2), and various configurable features such as X11 support and large file support. Includes build system adjustments for shared libraries and pkg-config.
• packages/l/libsemanage/xmake.lua
  • Added a new package definition for libsemanage, a library for SELinux binary policy manipulation, outlining its dependencies (flex, bison, bzip2, audit, libselinux) and build process. Includes dynamic linking adjustments based on dependent package configurations.
• packages/l/libsepol/xmake.lua
  • Added a new package definition for libsepol, a library for SELinux binary policy manipulation, including its source, version, and conditional dependency on flex for CIL support. Contains build system adjustments for shared libraries and pkg-config.
• packages/p/policycoreutils/xmake.lua
  • Added a new package definition for policycoreutils, providing SELinux policy core utilities, with dependencies on gettext and libsemanage. Incorporates dynamic linking adjustments for audit and libselinux dependencies.
• scripts/test.lua
  • Removed libselinux from the locked_packages list, indicating it is now managed as a standard package.

Activity

• star-hengxing requested a summary of the pull request.

[waruqi]

另外，rebase 下，有冲突

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically.

---

In addition, under rebase, there is conflict

[waruqi]

建议还是挨个包添加，拆开来单独 pr 提交。方便 review ，调起来也方便。

[Issues-translate-bot]

Bot detected the issue body's language is not English, translate it automatically.

---

It is recommended to add packages one by one, and disassemble them and submit them separately in pr. Convenient review, easy to adjust.