meta-selinux - Layer enabling SELinux support.

Age	Commit message (Collapse)	Author
2013-04-16	openssl: remove bbappend since oe-core merged	Xin Ouyang
	oe-core has used "-Wa,--noexecstack" in CFLAG not only for native now, so the bbappend should be removed. http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/meta/recipes-connectivity/openssl/openssl.inc?id=4fb837687dd68363f25fbfc15207dd05d1369661 Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-04-15	shadow/openssh: use pam_selinux only if target_selinux enabled	Xin Ouyang
	We add pam conf files for login/sshd to use pam_selinux module. When selinux is not in DISTRO_FEATURES, pam-plugin-selinux would not be built, this will cause runtime errors to not allow users to login in on the console or ssh. Use @target_selinux() to enable these pam conf files conditionally. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-03-01	bind: restore rndc.key security context	Xin Ouyang
	rndc.key would be labeled with wrong named_zone_t inherited from /etc/bind while creating, so restorecon on it. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-02-27	bind: use volatiles to create /var subdirs.	Xin Ouyang
	Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-01-05	packages: inherit with-selinux	Xin Ouyang
	Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2012-10-18	openssl: disable execstack in CFLAG	Xin Ouyang
	"-Wa,--noexecstack" will mark objects as requiring executable stack, this is a dangerous CFLAG and would cause security issues. So disable it as most distros did. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2012-10-18	openssh: enable pam and selinux.	Xin Ouyang
	sshd_config file from oe-core to set "UsePAM yes". sshd file (pam config for sshd) from oe-core to add pam_selinux module. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2012-06-15	openssh: Build with selinux support.	Xin Ouyang
	Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>