diff --git a/.gitignore b/.gitignore index 61e9911..7e4f9fb 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -/mrtg-2.17.10.tar.gz -/mrtg-2.17.10.tar.gz.md5 +/mrtg-2.17.7.tar.gz +/mrtg-2.17.7.tar.gz.md5 diff --git a/mrtg-2.17.4-cfgmaker-ifhighspeed.patch b/mrtg-2.17.4-cfgmaker-ifhighspeed.patch index 0b401f4..3ec8bf7 100644 --- a/mrtg-2.17.4-cfgmaker-ifhighspeed.patch +++ b/mrtg-2.17.4-cfgmaker-ifhighspeed.patch @@ -1,9 +1,9 @@ -diff -up mrtg-2.17.10/bin/cfgmaker.orig mrtg-2.17.10/bin/cfgmaker ---- mrtg-2.17.10/bin/cfgmaker.orig 2022-01-20 08:05:38.441966441 +0100 -+++ mrtg-2.17.10/bin/cfgmaker 2022-01-20 08:05:59.947909140 +0100 +diff -up mrtg-2.17.7/bin/cfgmaker.orig mrtg-2.17.7/bin/cfgmaker +--- mrtg-2.17.7/bin/cfgmaker.orig 2018-08-08 13:14:19.609048676 +0200 ++++ mrtg-2.17.7/bin/cfgmaker 2018-08-08 13:15:17.795102892 +0200 @@ -224,7 +224,7 @@ sub InterfaceInfo($$$$$) { # maximum value (4,294,967,295) and ifHighSpeed must be used - # to report the interface's speed. For a sub-layer which has + # to report the interace's speed. For a sub-layer which has # no concept of bandwidth, this object should be zero." - if ( (not defined $value) || ($value == 2**32-1) ) { + if ( (not defined $value) || ($value == 2**32-1) || ($value == 2**32-2)) { diff --git a/mrtg-2.17.7-traffic-sum-man-option.patch b/mrtg-2.17.7-traffic-sum-man-option.patch new file mode 100644 index 0000000..c547faf --- /dev/null +++ b/mrtg-2.17.7-traffic-sum-man-option.patch @@ -0,0 +1,12 @@ +diff -up mrtg-2.17.7/bin/mrtg-traffic-sum.orig mrtg-2.17.7/bin/mrtg-traffic-sum +--- mrtg-2.17.7/bin/mrtg-traffic-sum.orig 2018-10-18 12:21:12.616589922 +0200 ++++ mrtg-2.17.7/bin/mrtg-traffic-sum 2018-10-18 12:23:10.852648709 +0200 +@@ -58,7 +58,7 @@ sub mailout($$); + sub main() + { + # parse options +- GetOptions(\%opt, 'min=i','help|h', 'catch=s', 'email=s','version','range=s','units=s') or exit(1); ++ GetOptions(\%opt, 'min=i','help|h', 'catch=s', 'email=s','version','range=s','units=s','man') or exit(1); + if($opt{help}) { pod2usage(1) } + if($opt{man}) { pod2usage(-exitstatus => 0, -verbose => 2) } + if($opt{version}) { print "mrtg-traffic-sum $Revision\n"; exit(0) } diff --git a/mrtg-configure-c99.patch b/mrtg-configure-c99.patch deleted file mode 100644 index bc0831c..0000000 --- a/mrtg-configure-c99.patch +++ /dev/null @@ -1,32 +0,0 @@ -Avoid an implicit declaration of exit. This prevents compilation -failures in case compilers switch to rejecting implicit function -declarations by default. - -Submitted upstream: - -diff --git a/configure b/configure -index 07b0fbda88c3847a..8b87d2750822c02b 100755 ---- a/configure -+++ b/configure -@@ -3670,7 +3670,7 @@ else - char buffer[1000]; - sprintf (buffer, "%${format}u", a); - sscanf (buffer, "%${format}u", &b); -- exit (b!=a); -+ return b!=a; - } - - _ACEOF -diff --git a/configure.ac b/configure.ac -index 1416f3c2d6e2f645..939725ccf306fb2f 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -37,7 +37,7 @@ AC_CACHE_VAL(mr_cv_long_long_format_specifier,[ - char buffer[1000]; - sprintf (buffer, "%${format}u", a); - sscanf (buffer, "%${format}u", &b); -- exit (b!=a); -+ return b!=a; - } - ]])],[mr_cv_long_long_format_specifier="%${format}d" - mr_cv_long_long_format="${format}d" diff --git a/mrtg.fc b/mrtg.fc deleted file mode 100644 index b235a1b..0000000 --- a/mrtg.fc +++ /dev/null @@ -1,16 +0,0 @@ -/etc/mrtg.* gen_context(system_u:object_r:mrtg_etc_t,s0) -/etc/mrtg/mrtg\.ok -- gen_context(system_u:object_r:mrtg_lock_t,s0) - -/etc/rc\.d/init\.d/mrtg -- gen_context(system_u:object_r:mrtg_initrc_exec_t,s0) - -/usr/bin/mrtg -- gen_context(system_u:object_r:mrtg_exec_t,s0) - -/var/lib/mrtg(/.*)? gen_context(system_u:object_r:mrtg_var_lib_t,s0) - -/run/lock/mrtg(/.*)? gen_context(system_u:object_r:mrtg_lock_t,s0) -/run/lock/mrtg-rrd(/.*)? gen_context(system_u:object_r:mrtg_lock_t,s0) -/run/lock/subsys/mrtg -- gen_context(system_u:object_r:mrtg_lock_t,s0) - -/var/log/mrtg.* gen_context(system_u:object_r:mrtg_log_t,s0) - -/run/mrtg\.pid -- gen_context(system_u:object_r:mrtg_var_run_t,s0) diff --git a/mrtg.if b/mrtg.if deleted file mode 100644 index 2346458..0000000 --- a/mrtg.if +++ /dev/null @@ -1,88 +0,0 @@ -## Network traffic graphing. - -######################################## -## -## Read mrtg lib files. -## -## -## -## Domain allowed access. -## -## -# -interface(`mrtg_read_lib_files',` - gen_require(` - type mrtg_var_lib_t; - ') - - files_search_var_lib($1) - read_files_pattern($1, mrtg_var_lib_t, mrtg_var_lib_t) -') - -######################################## -## -## Create and append mrtg log files. -## -## -## -## Domain allowed access. -## -## -# -interface(`mrtg_append_create_logs',` - gen_require(` - type mrtg_log_t; - ') - - logging_search_logs($1) - append_files_pattern($1, mrtg_log_t, mrtg_log_t) - create_files_pattern($1, mrtg_log_t, mrtg_log_t) -') - -######################################## -## -## All of the rules required to -## administrate an mrtg environment. -## -## -## -## Domain allowed access. -## -## -## -## -## Role allowed access. -## -## -## -# -interface(`mrtg_admin',` - gen_require(` - type mrtg_t, mrtg_var_run_t, mrtg_initrc_exec_t; - type mrtg_var_lib_t, mrtg_lock_t, mrtg_log_t; - type mrtg_etc_t; - ') - - allow $1 mrtg_t:process { ptrace signal_perms }; - ps_process_pattern($1, mrtg_t) - - init_labeled_script_domtrans($1, mrtg_initrc_exec_t) - domain_system_change_exemption($1) - role_transition $2 mrtg_initrc_exec_t system_r; - allow $2 system_r; - - files_search_etc($1) - admin_pattern($1, mrtg_etc_t) - - files_search_locks($1) - admin_pattern($1, mrtg_lock_t) - - logging_search_logs($1) - admin_pattern($1, mrtg_log_t) - - files_search_pids($1) - admin_pattern($1, mrtg_var_run_t) - - files_search_var_lib($1) - admin_pattern($1, mrtg_var_lib_t) -') diff --git a/mrtg.service b/mrtg.service index 4d98199..e480970 100644 --- a/mrtg.service +++ b/mrtg.service @@ -30,7 +30,7 @@ ExecStart=/usr/bin/mrtg /etc/mrtg/mrtg.cfg --lock-file /var/lock/mrtg/mrtg_l --c # - RunAsDaemon: no; (periodic invocation) : #Type=oneshot Type=simple -LogLevelMax=notice +StandardOutput=syslog [Install] WantedBy=multi-user.target diff --git a/mrtg.spec b/mrtg.spec index 1f24bd2..92d2b69 100644 --- a/mrtg.spec +++ b/mrtg.spec @@ -3,15 +3,10 @@ %global contentdir %{_localstatedir}/www/%{name} %global libdir %{_localstatedir}/lib/mrtg -# defining macros needed by SELinux -%global with_selinux 1 -%global selinuxtype targeted -%global modulename mrtg - Summary: Multi Router Traffic Grapher Name: mrtg -Version: 2.17.10 -Release: 12%{?dist} +Version: 2.17.7 +Release: 8%{?dist} URL: http://oss.oetiker.ch/mrtg/ Source0: http://oss.oetiker.ch/mrtg/pub/mrtg-%{version}.tar.gz Source1: http://oss.oetiker.ch/mrtg/pub/mrtg-%{version}.tar.gz.md5 @@ -29,27 +24,18 @@ Source7: mrtg.tmpfiles Source8: mrtg.service # Source9: systemd timer file Source9: mrtg.timer -# Source100-102: selinux policy for mrtg, extracted -# from https://github.com/fedora-selinux/selinux-policy -Source100: %{modulename}.te -Source101: %{modulename}.if -Source102: %{modulename}.fc Patch0: mrtg-2.15.0-lib64.patch Patch1: mrtg-2.17.2-socket6-fix.patch # Patch2: some devices return 2**32-2 on ifSpeed (e. g. IBM FibreChannel switches) Patch2: mrtg-2.17.4-cfgmaker-ifhighspeed.patch -Patch3: mrtg-configure-c99.patch -License: GPL-2.0-or-later +# Patch3: fixes 'man' option in mrtg-traffic-sum, see rhbz#1612188 +Patch3: mrtg-2.17.7-traffic-sum-man-option.patch +License: GPLv2+ Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units Requires: perl-Socket6 perl-IO-Socket-INET6 perl-locale Requires: gd -%if 0%{?with_selinux} -# This ensures that the *-selinux package and all it’s dependencies are not pulled -# into containers and other systems that do not use SELinux -Requires: (%{name}-selinux if selinux-policy-%{selinuxtype}) -%endif BuildRequires: make BuildRequires: gd-devel, libpng-devel BuildRequires: perl-generators @@ -64,26 +50,12 @@ The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic load on network-links. MRTG generates HTML pages containing PNG images which provide a LIVE visual representation of this traffic. -%if 0%{?with_selinux} -# SELinux subpackage -%package selinux -Summary: mrtg SELinux policy -BuildArch: noarch -Requires: selinux-policy-%{selinuxtype} -Requires(post): selinux-policy-%{selinuxtype} -BuildRequires: selinux-policy-devel -%{?selinux_requires} - -%description selinux -Custom SELinux policy module -%endif - %prep %setup -q -%patch -P0 -p1 -b .lib64 -%patch -P1 -p1 -b .socket6 -%patch -P2 -p1 -b .ifhighspeed -%patch -P3 -p1 -b .c99 +%patch0 -p1 -b .lib64 +%patch1 -p1 -b .socket6 +%patch2 -p1 -b .ifhighspeed +%patch3 -p1 -b .traffic-sum-man-option for i in doc/mrtg-forum.1 doc/mrtg-squid.1 CHANGES; do iconv -f iso-8859-1 -t utf-8 < "$i" > "${i}_" @@ -103,15 +75,6 @@ find contrib -type f -exec \ find contrib -name "*.pl" -exec %{__perl} -e 's;\015;;gi' -p -i \{\} \; find contrib -type f | xargs chmod a-x -%if 0%{?with_selinux} -# SELinux policy (originally from selinux-policy-contrib) -# this policy module will override the production module -mkdir selinux -cp -p %{SOURCE100} %{SOURCE101} %{SOURCE102} selinux/ -make -f %{_datadir}/selinux/devel/Makefile %{modulename}.pp -bzip2 -9 %{modulename}.pp -%endif - %install rm -rf $RPM_BUILD_ROOT make install DESTDIR=$RPM_BUILD_ROOT @@ -144,13 +107,9 @@ done sed -i 's;@@lib@@;%{_lib};g' "$RPM_BUILD_ROOT"%{_mandir}/man1/*.1 -%if 0%{?with_selinux} -install -D -m 0644 %{modulename}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2 -install -D -p -m 0644 selinux/%{modulename}.if %{buildroot}%{_datadir}/selinux/devel/include/distributed/%{name}.if -%endif - %post install -d -m 0755 -o root -g root /var/lock/mrtg +restorecon /var/lock/mrtg %systemd_post mrtg.service %preun @@ -163,28 +122,6 @@ fi %postun %systemd_postun_with_restart mrtg.service -%if 0%{?with_selinux} -# SELinux contexts are saved so that only affected files can be -# relabeled after the policy module installation -%pre selinux -%selinux_relabel_pre -s %{selinuxtype} - -%post selinux -%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2 -%selinux_relabel_post -s %{selinuxtype} - -if [ "$1" -le "1" ]; then # First install - # the service needs to be restarted for the custom label to be applied - %systemd_postun_with_restart mrtg.service &> /dev/null || : -fi - -%postun selinux -if [ $1 -eq 0 ]; then - %selinux_modules_uninstall -s %{selinuxtype} %{modulename} - %selinux_relabel_post -s %{selinuxtype} -fi -%endif - %files %license COPYING %doc contrib CHANGES COPYRIGHT README THANKS @@ -204,76 +141,7 @@ fi %{_unitdir}/mrtg.service %{_unitdir}/mrtg.timer -%if 0%{?with_selinux} -%files selinux -%{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.* -%{_datadir}/selinux/devel/include/distributed/%{modulename}.if -%ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename} -%endif - %changelog -* Thu Jul 24 2025 Fedora Release Engineering - 2.17.10-12 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - -* Tue Feb 04 2025 Vitezslav Crhonek - 2.17.10-11 -- Remove redundand restorecon call, redirect safe to ignore output - to /dev/null, mark module directory to avoid rpm verification - -* Fri Jan 17 2025 Fedora Release Engineering - 2.17.10-10 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - -* Thu Jul 18 2024 Fedora Release Engineering - 2.17.10-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - -* Thu Jan 25 2024 Fedora Release Engineering - 2.17.10-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Sun Jan 21 2024 Fedora Release Engineering - 2.17.10-7 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Thu Jul 20 2023 Fedora Release Engineering - 2.17.10-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - -* Tue Apr 25 2023 Vitezslav Crhonek - 2.17.10-5 -- SPDX migration - -* Thu Jan 19 2023 Fedora Release Engineering - 2.17.10-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - -* Fri Dec 16 2022 Florian Weimer - 2.17.10-3 -- Port configure script to C99 - -* Thu Jul 21 2022 Fedora Release Engineering - 2.17.10-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - -* Thu Jan 20 2022 Vitezslav Crhonek - 2.17.10-1 -- Update to mrtg-2.17.10 - Resolves: #2041965 - -* Thu Sep 23 2021 Vitezslav Crhonek - 2.17.8-1 -- Update to mrtg-2.17.8 - Resolves: #1990765 - -* Thu Jul 22 2021 Fedora Release Engineering - 2.17.7-13 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Tue Jun 08 2021 Vitezslav Crhonek - 2.17.7-12 -- Ship interface file within -selinux subpackage - -* Tue May 18 2021 Vitezslav Crhonek - 2.17.7-11 -- Remove deprecated StandardOutput=syslog -- Add LogLevelMax=notice to avoid loggin each start/stop of the service - when mrtg.timer is used - Resolves: #911766 - -* Mon Apr 12 2021 Vitezslav Crhonek - 2.17.7-10 -- Incorporate -selinux subpackage - See https://fedoraproject.org/wiki/SELinux/IndependentPolicy - -* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 2.17.7-9 -- Rebuilt for updated systemd-rpm-macros - See https://pagure.io/fesco/issue/2583. - * Tue Jan 26 2021 Fedora Release Engineering - 2.17.7-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild diff --git a/mrtg.te b/mrtg.te deleted file mode 100644 index 9636408..0000000 --- a/mrtg.te +++ /dev/null @@ -1,149 +0,0 @@ -policy_module(mrtg, 1.9.0) - -######################################## -# -# Declarations -# - -type mrtg_t; -type mrtg_exec_t; -init_system_domain(mrtg_t, mrtg_exec_t) - -type mrtg_initrc_exec_t; -init_script_file(mrtg_initrc_exec_t) - -type mrtg_etc_t; -files_config_file(mrtg_etc_t) - -type mrtg_lock_t; -files_lock_file(mrtg_lock_t) - -type mrtg_log_t; -logging_log_file(mrtg_log_t) - -type mrtg_var_lib_t; -files_type(mrtg_var_lib_t) - -type mrtg_var_run_t; -files_pid_file(mrtg_var_run_t) - -######################################## -# -# Local policy -# - -allow mrtg_t self:capability { chown setgid setuid }; -dontaudit mrtg_t self:capability sys_tty_config; -allow mrtg_t self:process signal_perms; -allow mrtg_t self:fifo_file rw_fifo_file_perms; - -allow mrtg_t mrtg_etc_t:dir list_dir_perms; -allow mrtg_t mrtg_etc_t:file read_file_perms; -allow mrtg_t mrtg_etc_t:lnk_file read_lnk_file_perms; - -allow mrtg_t mrtg_lock_t:dir manage_dir_perms; -allow mrtg_t mrtg_lock_t:file manage_file_perms; -allow mrtg_t mrtg_lock_t:lnk_file manage_lnk_file_perms; -files_lock_filetrans(mrtg_t, mrtg_lock_t, { dir file }) - -manage_dirs_pattern(mrtg_t, mrtg_log_t, mrtg_log_t) -append_files_pattern(mrtg_t, mrtg_log_t, mrtg_log_t) -create_files_pattern(mrtg_t, mrtg_log_t, mrtg_log_t) -setattr_files_pattern(mrtg_t, mrtg_log_t, mrtg_log_t) -logging_log_filetrans(mrtg_t, mrtg_log_t, { dir file }) - -manage_files_pattern(mrtg_t, mrtg_var_lib_t, mrtg_var_lib_t) -manage_lnk_files_pattern(mrtg_t, mrtg_var_lib_t, mrtg_var_lib_t) - -allow mrtg_t mrtg_var_run_t:file manage_file_perms; -files_pid_filetrans(mrtg_t, mrtg_var_run_t, file) - -kernel_read_system_state(mrtg_t) -kernel_read_network_state(mrtg_t) -kernel_read_kernel_sysctls(mrtg_t) - -corecmd_exec_bin(mrtg_t) -corecmd_exec_shell(mrtg_t) - -corenet_all_recvfrom_netlabel(mrtg_t) -corenet_tcp_sendrecv_generic_if(mrtg_t) -corenet_tcp_sendrecv_generic_node(mrtg_t) - -corenet_sendrecv_all_client_packets(mrtg_t) -corenet_tcp_connect_all_ports(mrtg_t) -corenet_tcp_sendrecv_all_ports(mrtg_t) - -dev_read_sysfs(mrtg_t) -dev_read_urand(mrtg_t) - -domain_use_interactive_fds(mrtg_t) -domain_dontaudit_search_all_domains_state(mrtg_t) - -files_getattr_tmp_dirs(mrtg_t) -files_read_etc_runtime_files(mrtg_t) -files_search_var(mrtg_t) -files_search_locks(mrtg_t) -files_search_var_lib(mrtg_t) -files_search_spool(mrtg_t) - -fs_search_auto_mountpoints(mrtg_t) -fs_getattr_all_fs(mrtg_t) -fs_list_inotifyfs(mrtg_t) - -term_dontaudit_use_console(mrtg_t) - -init_use_fds(mrtg_t) -init_use_script_ptys(mrtg_t) -init_read_utmp(mrtg_t) -init_dontaudit_write_utmp(mrtg_t) - -auth_use_nsswitch(mrtg_t) - -libs_read_lib_files(mrtg_t) - -logging_send_syslog_msg(mrtg_t) - -selinux_dontaudit_getattr_dir(mrtg_t) - -userdom_use_inherited_user_terminals(mrtg_t) -userdom_dontaudit_read_user_home_content_files(mrtg_t) -userdom_dontaudit_use_unpriv_user_fds(mrtg_t) -userdom_dontaudit_list_admin_dir(mrtg_t) - -netutils_domtrans_ping(mrtg_t) - -ifdef(`enable_mls',` - corenet_udp_sendrecv_lo_if(mrtg_t) -') - -optional_policy(` - apache_manage_sys_content(mrtg_t) -') - -optional_policy(` - cron_system_entry(mrtg_t, mrtg_exec_t) -') - -optional_policy(` - hostname_exec(mrtg_t) -') - -optional_policy(` - hddtemp_domtrans(mrtg_t) -') - -optional_policy(` - seutil_sigchld_newrole(mrtg_t) -') - -optional_policy(` - quota_dontaudit_getattr_db(mrtg_t) -') - -optional_policy(` - snmp_read_snmp_var_lib_files(mrtg_t) -') - -optional_policy(` - udev_read_db(mrtg_t) -') diff --git a/sources b/sources index 40483cd..c80672a 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (mrtg-2.17.10.tar.gz) = b1c5232f1b3dcec39adc4fb5a423738f9470ad470e91c6a918cf3f875e71af263d8e03694c3d66129b2653fa498d8d9d9b95349fe90e9d2e0b3ed6c09d06e080 -SHA512 (mrtg-2.17.10.tar.gz.md5) = 3969a24f542daa4e513ab03dc6ced38160818e7ddfdf35f7c4c4323442d8cd35314baba0f5c443634e1d409769b6a9f4bebfa5ea970bec8ff1fcd7bcfd1c7d5d +SHA512 (mrtg-2.17.7.tar.gz) = b25ab38416213bc5128612724530f36f4a855bb66a65f8bbe4bdafef05d2688eed68f5c3df1e13193102507a4114e71ec226ad32dd6b4d3ae2e2291320d8e768 +SHA512 (mrtg-2.17.7.tar.gz.md5) = 146bf77c985e54e949daceb3bfe2b7c8f67f7f1c495a3e666957a91514c6fcadeb02ecc5d42d8536fef1b9e70779018736ffe602c216f6c283c9f784f0cad50f diff --git a/tests/tests-DSP.yml b/tests/tests-DSP.yml deleted file mode 100644 index 6e2ba72..0000000 --- a/tests/tests-DSP.yml +++ /dev/null @@ -1,37 +0,0 @@ -- hosts: localhost - - roles: - - role: standard-test-beakerlib - tags: - - classic - repositories: - - repo: https://pagure.io/DSP_test.git - dest: DSP_test - version: master - - tests: - - DSP_test - environment: - # RPM package containing the policy module - TEST_RPM: mrtg-selinux - # policy module name - TEST_POLICY: mrtg - # policy sources will be extracted from corresponding .src.rpm - # policy tar filename regexp (e.g. "usbguard-selinux*.tar.gz") - # or empty string if policy sources are not inside a tar archive - POLICY_TAR: '' - # path to policy sources (in of the tar archive) -- //.(te|if|fc) - # or path in the src.rpm if there is no tar archive -- //.(te|if|fc) - # can contain wildcards (e.g. for versions etc.) - POLICY_PATH: . - - required_packages: - - policycoreutils - - selinux-policy - - selinux-policy-targeted - - setools-console - - libselinux-utils - - rpm - - tar - - git - - mrtg