aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2016-10-25 12:23:56 -0700
committerArmin Kuster <akuster808@gmail.com>2016-11-02 09:06:39 -0700
commitef20cdf6ea6131420a9b92d685372e311366fc82 (patch)
tree7d52ecf00175a0327bbaf7ecd3948b1a588f4e1f
parent5d545800ba69e877b5ca93b6d32e6b2b085cc01f (diff)
downloadmeta-security-ef20cdf6ea6131420a9b92d685372e311366fc82.tar.gz
meta-security-ef20cdf6ea6131420a9b92d685372e311366fc82.tar.bz2
meta-security-ef20cdf6ea6131420a9b92d685372e311366fc82.zip
smack kernel: add smack kernel config fragments
Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--recipes-kernel/linux/linux-yocto-4.8/smack-default-lsm.cfg2
-rw-r--r--recipes-kernel/linux/linux-yocto-4.8/smack.cfg8
-rw-r--r--recipes-kernel/linux/linux-yocto_4.8.bbappend5
3 files changed, 15 insertions, 0 deletions
diff --git a/recipes-kernel/linux/linux-yocto-4.8/smack-default-lsm.cfg b/recipes-kernel/linux/linux-yocto-4.8/smack-default-lsm.cfg
new file mode 100644
index 0000000..b5c4845
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto-4.8/smack-default-lsm.cfg
@@ -0,0 +1,2 @@
+CONFIG_DEFAULT_SECURITY="smack"
+CONFIG_DEFAULT_SECURITY_SMACK=y
diff --git a/recipes-kernel/linux/linux-yocto-4.8/smack.cfg b/recipes-kernel/linux/linux-yocto-4.8/smack.cfg
new file mode 100644
index 0000000..62f465a
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto-4.8/smack.cfg
@@ -0,0 +1,8 @@
+CONFIG_IP_NF_SECURITY=m
+CONFIG_IP6_NF_SECURITY=m
+CONFIG_EXT2_FS_SECURITY=y
+CONFIG_EXT3_FS_SECURITY=y
+CONFIG_EXT4_FS_SECURITY=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_SMACK=y
+CONFIG_TMPFS_XATTR=y
diff --git a/recipes-kernel/linux/linux-yocto_4.8.bbappend b/recipes-kernel/linux/linux-yocto_4.8.bbappend
index 0e6960e..048e8fd 100644
--- a/recipes-kernel/linux/linux-yocto_4.8.bbappend
+++ b/recipes-kernel/linux/linux-yocto_4.8.bbappend
@@ -5,3 +5,8 @@ SRC_URI += "\
${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' file://tpm.cfg', '', d)} \
${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' file://tpm.scc', '', d)} \
"
+
+SRC_URI += "\
+ ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack.cfg', '', d)} \
+ ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack-default-lsm.cfg', '', d)} \
+"