# Build the SELinux policy module from redampio.te + redampio.fc.
#
# Requires `selinux-policy-devel` (provides /usr/share/selinux/devel/Makefile
# and the checkmodule/semodule_package toolchain). Invoked from postinst on
# RPM-based hosts; do not depend on this on Debian/Ubuntu systems where
# SELinux is typically disabled.

MODULE_NAME := redampio
POLICY_DEVEL_MAKEFILE := /usr/share/selinux/devel/Makefile

all: $(MODULE_NAME).pp

$(MODULE_NAME).pp: $(MODULE_NAME).te $(MODULE_NAME).fc
	@if [ ! -f $(POLICY_DEVEL_MAKEFILE) ]; then \
		echo "redampio selinux: $(POLICY_DEVEL_MAKEFILE) missing — install selinux-policy-devel" >&2; \
		exit 1; \
	fi
	$(MAKE) -f $(POLICY_DEVEL_MAKEFILE) $(MODULE_NAME).pp

clean:
	rm -f $(MODULE_NAME).pp $(MODULE_NAME).mod $(MODULE_NAME).mod.fc tmp/*

.PHONY: all clean
