package/openrc: enable selinux support when libselinux is enabled

OpenRC suports SELinux, so there is no reason to forcibly disable it.

Notice this only allows OpenRC to perform the initial policy load and
set the enforcing mode. In order really use SELinux it's also
necessary to select refpolicy, which provides a policy, and
policycoreutils, which provides restorecon and other SELinux
utilities.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Carlos Santos <unixmania@gmail.com>
Tested-by: Carlos Santos <unixmania@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

diff --git a/package/openrc/openrc.mk b/package/openrc/openrc.mk
index 6057451bfe3c2106d0f6007ac0d262220f9d76b7..97536dad37e6e633818ed503acfea80f0d5e59d4 100644 (file)
--- a/package/openrc/openrc.mk
+++ b/package/openrc/openrc.mk
@@ -18,7 +18,6 @@ OPENRC_MAKE_OPTS = \
        LIBNAME=lib \
        LIBEXECDIR=/usr/libexec/rc \
        MKPKGCONFIG=no \
-       MKSELINUX=no \
        MKSYSVINIT=yes \
        BRANDING="Buildroot $(BR2_VERSION_FULL)" \
        CC=$(TARGET_CC)
@@ -29,6 +28,13 @@ else
 OPENRC_MAKE_OPTS += MKSTATICLIBS=yes
 endif
 
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+OPENRC_MAKE_OPTS += MKSELINUX=yes
+OPENRC_DEPENDENCIES += libselinux
+else
+OPENRC_MAKE_OPTS += MKSELINUX=no
+endif
+
 define OPENRC_BUILD_CMDS
        $(MAKE) $(OPENRC_MAKE_OPTS) -C $(@D)
 endef