aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security/selinux/selinux-sandbox.inc
blob: 8616dd7f5d1c105e8c66516b43e1f5566fea7ce2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
SUMMARY = "Run cmd under an SELinux sandbox"
DESCRIPTION = "\
Run application within a tightly confined SELinux domain. The default \
sandbox domain only allows applications the ability to read and write \
stdin, stdout and any other file descriptors handed to it."

SECTION = "base"
LICENSE = "GPLv2+"

SRC_URI += "file://sandbox-de-bashify.patch \
"

DEPENDS += "libcap-ng libselinux"

RDEPENDS_${PN} += "\
        python-math \
        python-shell \
        python-subprocess \
        python-textutils \
        python-unixadmin \
        libselinux-python \
        selinux-python \
"

FILES_${PN} += "\
        ${datadir}/sandbox/sandboxX.sh \
        ${datadir}/sandbox/start \
"