selinux: use the kernel headers when building scripts/selinux
authorPaul Moore <paul@paul-moore.com>
Wed, 21 Dec 2016 15:39:25 +0000 (10:39 -0500)
committerPaul Moore <paul@paul-moore.com>
Wed, 21 Dec 2016 15:39:25 +0000 (10:39 -0500)
commitbfc5e3a6af397dcf9c99a6c1872458e7867c4680
tree09d7f23ed281538d97ead3b78691f2a33eee29ff
parent9287aed2ad1ff1bde5eb190bcd6dccd5f1cf47d3
selinux: use the kernel headers when building scripts/selinux

Commit 3322d0d64f4e ("selinux: keep SELinux in sync with new capability
definitions") added a check on the defined capabilities without
explicitly including the capability header file which caused problems
when building genheaders for users of clang/llvm.  Resolve this by
using the kernel headers when building genheaders, which is arguably
the right thing to do regardless, and explicitly including the
kernel's capability.h header file in classmap.h.  We also update the
mdp build, even though it wasn't causing an error we really should
be using the headers from the kernel we are building.

Reported-by: Nicolas Iooss <nicolas.iooss@m4x.org>
Signed-off-by: Paul Moore <paul@paul-moore.com>
scripts/selinux/genheaders/Makefile
scripts/selinux/genheaders/genheaders.c
scripts/selinux/mdp/Makefile
scripts/selinux/mdp/mdp.c
security/selinux/include/classmap.h