Age | Commit message (Collapse) | Author |
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Acked-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Add the selinux support for logrotate.
Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Add the selinux support for util-linux.
Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Add the selinux support for dbus.
Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
The recipe is derived from 2.1.3 with some changes made.
1. configuration files are updated to look for sbin binaries in /usr/sbin
2. a init.d file was derived from Debian to work with busybox's start-stop-daemon
3. the plugin package contents was fine tuned as some of the files from 2.1.3 were required
to let audit run.
Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Now, the default policy is "mls".
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Also add a patch to support xattrs and selinux.
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
See Yocto Project bugzilla:
https://bugzilla.yoctoproject.org/show_bug.cgi?id=2530
This is a temporary workaround to the parsing issue.
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
The executables in lib/, which are named as gen_*_h, will run on
the hosts to create *_tables.h/*tabs.h header files for the
targets.
In some old hosts, build will fail because audit.h in the old
linux-libc-headers (<= 2.6.29) has a incomplete netlink message
list for the audit system.
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
|
|
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
The upstream source appears to be down, find an alternative.
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
libselinux was attempting to ensure ARCH was set to i386 for any i*86
platform. Replaced the existing code with a simpler construct that
accomplishes the same goal.
A similar anonymous python block was being used in policycoreutils to
identify an optional dependency on libcap-ng and libcgroup. Also replaced
with a simpler construct. The newest policycoreutils depends on them both
anyway in the current configuration.
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
Added _git versions.
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
The preferred versions hould always be the latest stable, not the
git recipe.
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
Revised summary commit message, and added addition _git recipes.
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Add swig recipe from meta-openembedded/meta-oe
as of commit: 2eb27e123b7a85453224f2c822d43f8572eec57a
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
This reverts commit 63e12109ce58a5622dc47bdff2d1d347b3474a04.
|
|
|
|
|
|
|
|
add libcgroup recipe from meta-openembedded/meta-oe
as of commit: 902ed05dfca3ce2b98fc9e3a4cafdee956130df7
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
|
|
As we have specified "-e MAKEFLAGS= " to make, environment
variables will override variables in the top makefile but not
subdir makefiles.
Current bb uses sysvinit-xxx/src as ${B}, the environment variable
CPPFLAGS would override all "CPPFLAGS" lines in
sysvinit-xxx/src/Makefile. Such as "CPPFLAGS+= -DACCTON_OFF",
"CPPFLAGS += $(SELINUX_DEF)" and "CPPFLAGS += -DINIT_MAIN".
This causes some sections(#ifdef INIT_MAIN/WITH_SELINUX ... #endif)
will never be used.
|
|
|
|
|
|
|
|
|
|
With sysvinit, selinux_init_load_policy() will fail since sysfs is
still not mounted.
|
|
Also a patch from sysvinit upstream to fix selinux init.
|
|
|
|
|
|
|
|
|
|
|
|
selinux packages v2.20120215:
* libselinux-2.1.9
* libsemanage-2.1.6
* checkpolicy-2.1.8
* policycoreutils-2.1.10
* sepolgen-1.1.5
|
|
|
|
|