%define libsepol_version 3.5-1
%define libselinux_version 3.5-1

Name:    libsemanage
Version: 3.5
Release: 7
License: LGPL-2.1-or-later
Summary: SELinux binary policy manipulation library
URL:     https://github.com/SELinuxProject/selinux/wiki
Source0: https://github.com/SELinuxProject/selinux/releases/download/%{version}/libsemanage-%{version}.tar.gz
Source1: semanage.conf

Patch6001: backport-libsemanage-fix-swig-bindings-for-4.3.0.patch
Patch6002: backport-libsemanage-direct_api-INTEGER_OVERFLOW-read_len-rea.patch
Patch6003: backport-libsemanage-open-lock_file-with-O_RDWR.patch
Patch6004: backport-libsemanage-check-memory-allocations.patch
Patch6005: backport-libsemanage-free-resources-on-failed-connect-attempt.patch
Patch6006: backport-libsemanage-fix-asprintf-error-branch.patch
Patch6007: backport-libsemanage-avoid-leak-on-realloc-failure.patch
Patch6008: backport-libsemanage-free-ibdev-names-in-semanage_ibendport_v.patch
Patch6009: backport-libsemanage-check-for-path-formatting-failures.patch
Patch6010: backport-libsemanage-set-O_CLOEXEC-flag-for-file-descriptors.patch
Patch6011: backport-libsemanage-check-closing-written-files.patch
Patch6012: backport-libsemanage-handle-cil_set_handle_unknown-failure.patch
Patch6013: backport-libsemanage-handle-shell-allocation-failure.patch
Patch6014: backport-libsemanage-drop-duplicate-newlines-and-error-descriptions-in-error-messages.patch
Patch6015: backport-libsemanage-simplify-file-deletion.patch
Patch6016: backport-libsemanage-optimize-policy-by-default.patch

Patch9000: fix-test-failure-with-secilc.patch

BuildRequires: gcc python3-devel bison flex bzip2-devel audit-libs-devel
BuildRequires: libselinux-devel >= %{libselinux_version} swig  libsepol-devel >= %{libsepol_version}
BuildRequires: CUnit-devel gdb-headless

Requires: bzip2-libs audit-libs
Requires: libselinux >= %{libselinux_version}

%description
libsemanage is the policy management library. Using libsepol and
libselinux to interact with the SELinux system, it also calls helper
programs for loading policy and for checking whether the
file_contexts configuration is valid.

%package   devel
Summary:   Header files and libraries used to build policy manipulation tools
Requires:  %{name} = %{version}-%{release}
Provides:  libsemanage-static = %{version}-%{release}
Obsoletes: libsemanage-static < %{version}-%{release}

%description devel
The libsemanage-devel package contains the libraries and header files
needed for developing applications that manipulate SELinux policies.

%package -n python3-libsemanage
Summary:   python3 bindings for libsemanage
Requires:  %{name} = %{version}-%{release} libselinux-python3
Provides:  %{name}-python3 = %{version}-%{release}
Obsoletes: %{name}-python3 < %{version}-%{release}

%description -n python3-libsemanage
The python3-libsemanage package contains the python bindings for developing
SELinux management applications.

%package_help

%prep
%autosetup -n libsemanage-%{version} -p1

%build
export LDFLAGS="%{?__global_ldflags}"

make clean
%make_build CFLAGS="%{optflags}" swigify
%make_build CFLAGS="%{optflags}" LIBDIR="%{_libdir}" SHLIBDIR="%{_lib}" all
%make_build %{__python3} LIBDIR="%{_libdir}" CFLAGS="-g %{optflags}" pywrap

%install
mkdir -p %{buildroot}%{_libdir}
mkdir -p %{buildroot}%{_includedir}
mkdir -p %{buildroot}%{_sharedstatedir}/selinux
mkdir -p %{buildroot}%{_sharedstatedir}/selinux/tmp

make DESTDIR="%{buildroot}" LIBDIR="%{_libdir}" SHLIBDIR="%{_libdir}" install
make PYTHON=%{__python3} DESTDIR="%{buildroot}" LIBDIR="%{_libdir}" SHLIBDIR="%{_lib}" install-pywrap

cp %{SOURCE1} %{buildroot}/etc/selinux/semanage.conf
ln -sf  %{_libdir}/libsemanage.so.2 %{buildroot}/%{_libdir}/libsemanage.so

%check
make test

%files
%license LICENSE
%dir %{_sysconfdir}/selinux
%config(noreplace) %{_sysconfdir}/selinux/semanage.conf
%{_libdir}/libsemanage.so.*
%dir %{_libexecdir}/selinux
%dir %{_sharedstatedir}/selinux
%dir %{_sharedstatedir}/selinux/tmp

%files devel
%{_libdir}/libsemanage.a
%{_libdir}/libsemanage.so
%{_libdir}/pkgconfig/libsemanage.pc
%dir %{_includedir}/semanage
%{_includedir}/semanage/*.h

%files -n python3-libsemanage
%{python3_sitearch}/*.so
%{python3_sitearch}/semanage.py*
%{python3_sitearch}/__pycache__/semanage*
%{_libexecdir}/selinux/semanage_migrate_store

%files help
%{_mandir}/man3/*
%{_mandir}/man5/*
%lang(ru) %{_mandir}/ru/man5/*

%changelog
* Sun Apr 20 2025 changhan <changhan@xfusion.com> - 3.5-7
- backport libsemanage: optimize policy by default

* Sat Apr 19 2025 changhan <changhan@xfusion.com> - 3.5-6
- backport libsemanage: simplify file deletion

* Fri Apr 18 2025 changhan <changhan@xfusion.com> - 3.5-5
- backport libsemanage: drop duplicate newlines and error descriptions in error messages

* Fri Apr 18 2025 changhan <changhan@xfusion.com> - 3.5-4
- backport libsemanage: handle shell allocation failure

* Mon Mar 17 2025 hugel<gengqihu2@h-partners.com> - 3.5-3
- backport patches from upstream

* Wed Jan 22 2025 Funda Wang <fundawang@yeah.net> - 3.5-2
- add upstream patch fixing build with swig 4.3.0
- drop uselsss ldconfig scriptlets

* Mon Jul 17 2023 zhangguangzhi<zhangguangzhi3@huawei.com> - 3.5-1
- update version to 3.5

* Mon Jan 30 2023 zhangguangzhi<zhangguangzhi3@huawei.com> - 3.4-1
- update version to 3.4

* Fri Mar 18 2022 panxiaohe<panxh.life@foxmail.com> - 3.3-3
- delete useless old version dynamic library

* Tue Mar 15 2022 panxiaohe<panxh.life@foxmail.com> - 3.3-2
- use new version dynamic library

* Tue Dec 14 2021 panxiaohe<panxiaohe@huawei.com> - 3.3-1
- update to 3.3

* Mon Jul 26 2021 yangzhuangzhuang<yangzhuangzhuang1@huawei.com> - 3.1-6
- Remove unnecessary BuildRequires:gdb
 
* Sat Jul 17 2021 luhuaxin <1539327763@qq.com> - 3.1-5
- fix use after free in semanage config parse

* Sat May 22 2021 Hugel<gengqihu1@huawei.com> - 3.1-4
- enabel make test

* Thu Oct 29 2020 Hugel <gengqihu1@huawei.com> - 3.1-3
- remove the dependency on python2

* Mon Aug 17 2020 wangchen <wangchen137@huawei.com> - 3.1-2
- remove ustr

* Sat Jul 25 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.1-1
- update to 3.1

* Thu Mar 19 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.9-2
- add BuildRequires: gdb

* Thu Sep 5 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.9-1
- Package init