RPM: update selinux support in tdebase

redhat/docker/el6/packages

@@ -197,6 +197,7 @@ ruby-devel
 sane-backends-devel
 scons
 SDL-devel
+selinux-policy-devel
 sip-devel
 speex-devel
 sqlite-devel

redhat/docker/el7/packages

@@ -184,6 +184,7 @@ ruby-devel
 sane-backends-devel
 scons
 SDL-devel
+selinux-policy-devel
 sip-devel
 speex-devel
 sqlite-devel

redhat/docker/el8/packages

@@ -177,6 +177,7 @@ ruby
 ruby-devel
 sane-backends-devel
 SDL-devel
+selinux-policy-devel
 speex-devel
 sqlite-devel
 subversion-devel

redhat/docker/f30/packages

@@ -197,6 +197,7 @@ ruby-devel
 sane-backends-devel
 scons
 SDL-devel
+selinux-policy-devel
 sip-devel
 speex-devel
 sqlite-devel

redhat/docker/f31/packages

@@ -201,6 +201,7 @@ ruby-devel
 sane-backends-devel
 scons
 SDL-devel
+selinux-policy-devel
 sip-devel
 speex-devel
 sqlite-devel

redhat/main/tdebase/tdebase.spec

@@ -92,7 +92,7 @@ Source7:		xdm%{?dist}
 
 %if 0%{?fedora} >= 17 || 0%{?rhel} >= 6
 %define with_selinux_policy 1
-Source8:	tdm%{?dist}.pp
+Source8:	tdm%{?dist}.te
 %endif
 
 %if 0%{?mgaversion} >= 3
@@ -769,6 +769,12 @@ BuildRequires:		libnsl-devel
 # ATTR support
 BuildRequires:	libattr-devel
 
+# SELINUX support
+%if 0%{?rhel} >= 6 || 0%{?fedora}
+BuildRequires:	checkpolicy
+BuildRequires:	selinux-policy-devel
+%endif
+
 # tdebase is a metapackage that installs all sub-packages
 Requires: %{name}-runtime-data-common = %{version}-%{release}
 Requires: %{name}-data = %{version}-%{release}
@@ -3563,7 +3569,9 @@ fi
 
 # SELINUX policy for RHEL / Fedora
 %if 0%{?with_selinux_policy}
-%__install -D -m 644 "%{SOURCE8}" "%{?buildroot}%{tde_confdir}/%{tdm}/tdm.pp"
+%__cp -f "%{SOURCE8}" "tdm.te"
+%__make -f "%{_datadir}/selinux/devel/Makefile"
+%__install -D -m 644 -D "tdm.pp" "%{?buildroot}%{tde_confdir}/%{tdm}/tdm.pp"
 %endif
 
 # Mageia icon for TDE menu

redhat/main/tdebase/tdm.el6.te

@@ -1,5 +1,5 @@
 
-module tdm.el6 1.0;
+module tdm 1.0;
 
 require {
 	type fprintd_t;

redhat/main/tdebase/tdm.el7.te

@@ -1,5 +1,5 @@
 
-module tdm.el7 1.0;
+module tdm 1.0;
 
 require {
         type fprintd_t;

redhat/main/tdebase/tdm.el8.pp

@@ -1 +0,0 @@
-tdm.el7.pp

redhat/main/tdebase/tdm.el8.te

@@ -0,0 +1,11 @@
+
+module tdm 1.0;
+
+require {
+        type fprintd_t;
+        type init_t;
+        class dbus send_msg;
+}
+
+#============= fprintd_t ==============
+allow fprintd_t init_t:dbus send_msg;

redhat/main/tdebase/tdm.fc30.te

@@ -0,0 +1,11 @@
+
+module tdm 1.0;
+
+require {
+	type fprintd_t;
+	type init_t;
+	class dbus send_msg;
+}
+
+#============= fprintd_t ==============
+allow fprintd_t init_t:dbus send_msg;

redhat/main/tdebase/tdm.fc31.te

@@ -0,0 +1,11 @@
+
+module tdm 1.0;
+
+require {
+	type fprintd_t;
+	type init_t;
+	class dbus send_msg;
+}
+
+#============= fprintd_t ==============
+allow fprintd_t init_t:dbus send_msg;