%global modulename bubblewrap
%global selinuxtype targeted

Name:           bubblewrap-selinux
Version:        1.0.0
Release:        1
Summary:        SELinux policy for bubblewrap
License:        Apache-2.0 OR MIT
URL:            https://codeberg.org/HastD/bubblewrap-restricted
Source0:        bubblewrap.fc
Source1:        bubblewrap.if
Source2:        bubblewrap.te

BuildRequires:  make
BuildRequires:  selinux-policy-devel

Requires:       selinux-policy-%{selinuxtype}
Requires(post): selinux-policy-%{selinuxtype}
Recommends:     bubblewrap
BuildArch:      noarch
%{?selinux_requires_min}

%description
SELinux policy module for bubblewrap (https://github.com/containers/bubblewrap).

This is a port of the bubblewrap policy in SELinux Refpolicy to Fedora's
SELinux policy.

%prep
cp %{SOURCE0} %{SOURCE1} %{SOURCE2} .

%build
make -f %{_datadir}/selinux/devel/Makefile %{modulename}.pp
bzip2 -9 %{modulename}.pp

%install
install -Dp -m 0644 -t %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype} %{modulename}.pp.bz2
install -Dp -m 0644 -t %{buildroot}%{_datadir}/selinux/devel/include/distributed %{modulename}.if

%pre
%selinux_relabel_pre -s %{selinuxtype}

%post
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2

%postun
if [ "$1" -eq 0 ]; then
    %selinux_modules_uninstall -s %{selinuxtype} %{modulename}
    %selinux_relabel_post -s %{selinuxtype}
fi

%posttrans
%selinux_relabel_post -s %{selinuxtype}

%files
%{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.*
%{_datadir}/selinux/devel/include/distributed/%{modulename}.if
%ghost %verify(not md5 size mode mtime) %{_selinux_store_path}/%{selinuxtype}/active/modules/200/%{modulename}

%changelog
* Sat Sep 19 2026 Daniel Hast <hast.daniel@protonmail.com> - 1.0.0-1
- Initial release