1{ lib, stdenv, fetchurl, bison, flex, libsepol }:
2
3stdenv.mkDerivation rec {
4 pname = "checkpolicy";
5 version = "3.6";
6 inherit (libsepol) se_url;
7
8 src = fetchurl {
9 url = "${se_url}/${version}/checkpolicy-${version}.tar.gz";
10 sha256 = "sha256-GzRrPN1PinihV2J7rWSjs0ecZ7ahnRXm1chpRiDq28E=";
11 };
12
13 nativeBuildInputs = [ bison flex ];
14 buildInputs = [ libsepol ];
15
16 makeFlags = [
17 "PREFIX=$(out)"
18 "LIBSEPOLA=${lib.getLib libsepol}/lib/libsepol.a"
19 ];
20
21 meta = removeAttrs libsepol.meta ["outputsToInstall"] // {
22 description = "SELinux policy compiler";
23 };
24}