[meta-security][PATCH V2] tomoyo: Add kconfig

[meta-security][PATCH V2] tomoyo: Add kconfig

[Armin Kuster]

V2:
Fixed path to init program
Fix typo in name

Add kernel config to enable tomoyo

Signed-off-by: Armin Kuster <akuster@mvista.com>
---
 recipes-kernel/linux/linux-yocto/tomoyo.cfg    | 7 +++++++
 recipes-kernel/linux/linux-yocto/tomoyo.scc    | 4 ++++
 recipes-kernel/linux/linux-yocto_3.14.bbappend | 4 ++++
 3 files changed, 15 insertions(+)
 create mode 100644 recipes-kernel/linux/linux-yocto/tomoyo.cfg
 create mode 100644 recipes-kernel/linux/linux-yocto/tomoyo.scc
 create mode 100644 recipes-kernel/linux/linux-yocto_3.14.bbappend

diff --git a/recipes-kernel/linux/linux-yocto/tomoyo.cfg b/recipes-kernel/linux/linux-yocto/tomoyo.cfg
new file mode 100644
index 0000000..0caccf7
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto/tomoyo.cfg
@@ -0,0 +1,7 @@
+CONFIG_SECURITY_TOMOYO=y
+CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048
+CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024
+CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/sbin/ccs-init"
+CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/sbin/init"
+CONFIG_DEFAULT_SECURITY_TOMOYO=y
+CONFIG_DEFAULT_SECURITY="tomoyo"
diff --git a/recipes-kernel/linux/linux-yocto/tomoyo.scc b/recipes-kernel/linux/linux-yocto/tomoyo.scc
new file mode 100644
index 0000000..9080934
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto/tomoyo.scc
@@ -0,0 +1,4 @@
+define KFEATURE_DESCRIPTION "Tomoyo Kernel Support"
+define KFEATURE_COMPATIBILITY arch
+
+kconf non-hardware toyomo.cfg
diff --git a/recipes-kernel/linux/linux-yocto_3.14.bbappend b/recipes-kernel/linux/linux-yocto_3.14.bbappend
new file mode 100644
index 0000000..b46419c
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto_3.14.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
+
+# Tomoyo kernel support
+SRC_URI += "${@base_contains('DISTRO_FEATURES', 'tomoyo', ' file://tomoyo.cfg', '', d)}"
-- 
1.9.1