%global chromium_name trivalent
%global chromium_name_branding Trivalent
%global chromium_path %{_libdir}/%{chromium_name}

%global with_selinux 1
%global modulename %{chromium_name}
%global selinuxtype targeted

Name:           %{chromium_name}-selinux
Epoch:          1
Version:        1.0.0
Release:        1
Summary:        SELinux policies for %{chromium_name_branding}
License:        Apache-2.0 OR MIT
URL:            https://github.com/secureblue/Trivalent
Source:         https://github.com/HastD/Trivalent/archive/refs/heads/selinux-separate.tar.gz

BuildRequires:  container-selinux
BuildRequires:  make
BuildRequires:  selinux-policy-devel

Requires:       selinux-policy-%{selinuxtype}
Requires:       systemd
Requires(post): selinux-policy-%{selinuxtype}
Requires(post): systemd
Recommends:     %{name}
Recommends:     container-selinux
BuildArch:      noarch
%{?selinux_requires_min}

%description
SELinux policy modules for Trivalent.

%prep
%autosetup -n %{chromium_name}

%build
make -f %{_datadir}/selinux/devel/Makefile %{modulename}.pp
bzip2 -9 %{modulename}.pp

%install
install -Dp -m 0644 -t %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype} %{modulename}.pp.bz2
install -Dp -m 0644 -t %{buildroot}%{_datadir}/selinux/devel/include/distributed selinux/%{modulename}.if

%pre
%selinux_relabel_pre -s %{selinuxtype}

%post
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2

%postun
if [ "$1" -eq 0 ]; then
    %selinux_modules_uninstall -s %{selinuxtype} %{modulename}
    %selinux_relabel_post -s %{selinuxtype}
fi

%posttrans
%selinux_relabel_post -s %{selinuxtype}
%{_sbindir}/restorecon -Ri %{chromium_path}

%files
%{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.*
%{_datadir}/selinux/devel/include/distributed/%{modulename}.if
%ghost %verify(not md5 size mode mtime) %{_selinux_store_path}/%{selinuxtype}/active/modules/200/%{modulename}