Makefile: add target rebuild-interface-db

[cgzones]

Rebuild the policy interface database with 'sepolgen-ifgen'.
This database is required for reference style policy generation by
'audit2allow --reference'

[pebenito]

This should probably be reworked to have build-interface-db and rebuild-interface-db targets which would work like the load and reload targets in the Rules.monolithic.

[pebenito]

Wouldn't something like this work, without having to recursively call this makefile:

build-interface-db: install-headers $(tmpdir)/load

rebuild-interface-db $(tmpdir)/load:
	$(verbose) $(SEPOLGEN_IFGEN) $(VERBOSE_FLAG) -i $(headerdir)
	@touch $(tmpdir)/load

If something in headerdir needs to be deleted, my preference would be not to delete everything.

[pebenito]

This does not seem to be addressed.

[cgzones]

The initial design for the targets was:

• build-*: generate the interface - always run sepolgen-ifgen, so calling the target twice generates the database twice
• rebuild-*: generate the interface but assure that no leftover interfaces are in the header directory (after a re-factorization, removal of an module ...)

But since Refpolicy takes backward-compatibility serious the reasons for the rebuild-* target probably do not apply.

Dropped the rebuild-* target.

[cgzones]

sepolgen-ifgen currently dislikes these policy constructs:

refpolicy/include/system/userdomain.if: Syntax error on line 185 ` [type=TICK]

refpolicy/policy/modules/system/userdomain.if

Line 185 in 41963e7

gen_tunable(`$1_read_generic_user_content', true)

refpolicy/include/kernel/storage.if: Syntax error on line 133 $2 [type=IDENTIFIER]

refpolicy/policy/modules/kernel/storage.if

Line 133 in 41963e7

tunable_policy($2, `

refpolicy/include/kernel/devices.if: Syntax error on line 2805 $2 [type=IDENTIFIER]

refpolicy/policy/modules/kernel/devices.if

Line 2805 in 41963e7

tunable_policy($2, `

refpolicy/include/kernel/devices.if: Syntax error on line 2883 $2 [type=IDENTIFIER]

refpolicy/policy/modules/kernel/devices.if

Line 2883 in 41963e7

tunable_policy($2, `

refpolicy/include/kernel/devices.if: Syntax error on line 2959 $2 [type=IDENTIFIER]

refpolicy/policy/modules/kernel/devices.if

Line 2959 in 41963e7

tunable_policy($2, `

I think it doesn't like a) quoted arguments to gen_tunable and b) non-quoted arguments to tunable_policy

[cgzones]

With the patches from SELinuxProject/selinux#247, the interfac_info map builds successfully