Source: refpolicy
Version: 2:2.20140421-9
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
While working on the "reproducible builds" effort [1], we have noticed
that refpolicy could not be built reproducibly.
The attached patch removes timestamps from the build system. Once
applied, refpolicy can be built reproducibly in our current experimental
framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
diff -urNad refpolicy.orig/refpolicy-2.20140421/debian/rules
refpolicy/refpolicy-2.20140421/debian/rules
--- refpolicy.orig/refpolicy-2.20140421/debian/rules 2015-02-12
12:32:58.370078238 +0000
+++ refpolicy/refpolicy-2.20140421/debian/rules 2015-02-12 13:31:55.910717307
+0000
@@ -10,6 +10,8 @@
UBAC_mls = n
UNK_PERMS_mls = deny
+BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date)
+
%:
dh $@
@@ -152,6 +154,6 @@
$(CURDIR)/debian/tmp/etc/selinux/default/src/policy/build.conf
(cd $(CURDIR)/debian/tmp/etc/selinux/default/src/; mv policy
selinux-policy-src; \
rm
selinux-policy-src/support/pyplate.pyc; \
- tar zfc $(CURDIR)/debian/tmp/usr/src/selinux-policy-src.tar.gz
selinux-policy-src)
+ GZIP="-9n" tar zfc
$(CURDIR)/debian/tmp/usr/src/selinux-policy-src.tar.gz --mtime="$(BUILD_DATE)"
selinux-policy-src)
rm -rf $(CURDIR)/debian/tmp/etc/selinux/default/src/
touch $@
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel
