* [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages
@ 2021-01-28 9:27 Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 1/9] package/alsa-utils: add SELinux repolicy module Maxime Chevallier
` (10 more replies)
0 siblings, 11 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
Hi everyone,
This series is a second batch of patches adding a match between packages
and their corresponding module in the SELinux refpolicy.
This series focuses on the following packages :
- alsa-utils (for alsa-ctl)
- bridge-utils (for brctl)
- dmidecode
- hwloc
- kexec and kexec-lite
- kismet
- logrotate
- mcelog
Thanks,
Maxime
Maxime Chevallier (9):
package/alsa-utils: add SELinux repolicy module
package/bridge-utils: add SELinux refpolicy module
package/dmidecode: add SELinux refpolicy module
package/hwloc: add SELinux refpolicy module
package/kexec: add SELinux refpolicy module
package/kexec-lite: add SELinux refpolicy module
package/kismet: add SELinux refpolicy module
package/logrotate: add SELinux refpolicy module
package/mcelog: add SELinux refpolicy module
package/alsa-utils/alsa-utils.mk | 4 ++++
package/bridge-utils/bridge-utils.mk | 1 +
package/dmidecode/dmidecode.mk | 1 +
package/hwloc/hwloc.mk | 1 +
package/kexec-lite/kexec-lite.mk | 1 +
package/kexec/kexec.mk | 1 +
package/kismet/kismet.mk | 2 ++
package/logrotate/logrotate.mk | 1 +
package/mcelog/mcelog.mk | 1 +
9 files changed, 13 insertions(+)
--
2.25.4
^ permalink raw reply [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 1/9] package/alsa-utils: add SELinux repolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 2/9] package/bridge-utils: add SELinux refpolicy module Maxime Chevallier
` (9 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
The alsa-utils package adds some tools that needs the proper module in
the SELinux refpolicy to work properly when SELinux is enabled on the
system.
Add support for the alsactl tool, through the use of the admin/alsa
module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/alsa-utils/alsa-utils.mk | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/package/alsa-utils/alsa-utils.mk b/package/alsa-utils/alsa-utils.mk
index d9f0fea7b4..2658c827a0 100644
--- a/package/alsa-utils/alsa-utils.mk
+++ b/package/alsa-utils/alsa-utils.mk
@@ -15,6 +15,10 @@ ALSA_UTILS_DEPENDENCIES = host-pkgconf alsa-lib \
$(if $(BR2_PACKAGE_LIBSAMPLERATE),libsamplerate) \
$(TARGET_NLS_DEPENDENCIES)
+ifeq ($(BR2_PACKAGE_ALSA_UTILS_ALSACTL),y)
+ALSA_UTILS_SELINUX_MODULES += alsa
+endif
+
ALSA_UTILS_CONF_ENV = \
ac_cv_prog_ncurses5_config=$(STAGING_DIR)/usr/bin/$(NCURSES_CONFIG_SCRIPTS) \
LIBS=$(TARGET_NLS_LIBS)
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 2/9] package/bridge-utils: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 1/9] package/alsa-utils: add SELinux repolicy module Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 3/9] package/dmidecode: " Maxime Chevallier
` (8 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
Bridge-utils's brctl tool is supported by the admin/brctl SELinux
refpolicy module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/bridge-utils/bridge-utils.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/bridge-utils/bridge-utils.mk b/package/bridge-utils/bridge-utils.mk
index fa71c3a64e..2de5517fc5 100644
--- a/package/bridge-utils/bridge-utils.mk
+++ b/package/bridge-utils/bridge-utils.mk
@@ -11,6 +11,7 @@ BRIDGE_UTILS_AUTORECONF = YES
BRIDGE_UTILS_LICENSE = GPL-2.0+
BRIDGE_UTILS_LICENSE_FILES = COPYING
BRIDGE_UTILS_CPE_ID_VENDOR = kernel
+BRIDGE_UTILS_SELINUX_MODULES = brctl
# Avoid using the host's headers. Location is not important as
# required headers will anyway be found from within the sysroot.
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 3/9] package/dmidecode: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 1/9] package/alsa-utils: add SELinux repolicy module Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 2/9] package/bridge-utils: add SELinux refpolicy module Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 4/9] package/hwloc: " Maxime Chevallier
` (7 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
Dmidecode provides 4 tools, for which support for SELinux is provided by
the admin/dmidecode refpolicy module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/dmidecode/dmidecode.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/dmidecode/dmidecode.mk b/package/dmidecode/dmidecode.mk
index 89d9155f95..3f09cc956d 100644
--- a/package/dmidecode/dmidecode.mk
+++ b/package/dmidecode/dmidecode.mk
@@ -9,6 +9,7 @@ DMIDECODE_SOURCE = dmidecode-$(DMIDECODE_VERSION).tar.xz
DMIDECODE_SITE = http://download.savannah.gnu.org/releases/dmidecode
DMIDECODE_LICENSE = GPL-2.0+
DMIDECODE_LICENSE_FILES = LICENSE
+DMIDECODE_SELINUX_MODULES = dmidecode
define DMIDECODE_BUILD_CMDS
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) $(TARGET_CONFIGURE_OPTS)
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 4/9] package/hwloc: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (2 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 3/9] package/dmidecode: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 5/9] package/kexec: " Maxime Chevallier
` (6 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for hwloc is added by the admin/hwloc refpolicy module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/hwloc/hwloc.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/hwloc/hwloc.mk b/package/hwloc/hwloc.mk
index 81cb89e35b..9ec94f818d 100644
--- a/package/hwloc/hwloc.mk
+++ b/package/hwloc/hwloc.mk
@@ -12,6 +12,7 @@ HWLOC_LICENSE = BSD-3-Clause
HWLOC_LICENSE_FILES = COPYING
HWLOC_DEPENDENCIES = host-pkgconf
HWLOC_INSTALL_STAGING = YES
+HWLOC_SELINUX_MODULES = hwloc
HWLOC_CONF_OPTS = \
--disable-opencl \
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 5/9] package/kexec: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (3 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 4/9] package/hwloc: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 6/9] package/kexec-lite: " Maxime Chevallier
` (5 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for kexec and kdump is added by the admin/kdump
refpolicy module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/kexec/kexec.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/kexec/kexec.mk b/package/kexec/kexec.mk
index 63fcc074b5..c54ce1f11a 100644
--- a/package/kexec/kexec.mk
+++ b/package/kexec/kexec.mk
@@ -9,6 +9,7 @@ KEXEC_SOURCE = kexec-tools-$(KEXEC_VERSION).tar.xz
KEXEC_SITE = $(BR2_KERNEL_MIRROR)/linux/utils/kernel/kexec
KEXEC_LICENSE = GPL-2.0
KEXEC_LICENSE_FILES = COPYING
+KEXEC_SELINUX_MODULES = kdump
# Makefile expects $STRIP -o to work, so needed for !BR2_STRIP_strip
KEXEC_MAKE_OPTS = STRIP="$(TARGET_CROSS)strip"
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 6/9] package/kexec-lite: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (4 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 5/9] package/kexec: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 7/9] package/kismet: " Maxime Chevallier
` (4 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for the kexec-lite tool (which produces a kexec binary)
is added by the admin/kdump refpolicy module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/kexec-lite/kexec-lite.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/kexec-lite/kexec-lite.mk b/package/kexec-lite/kexec-lite.mk
index 45c5d4d8b7..89d42659bd 100644
--- a/package/kexec-lite/kexec-lite.mk
+++ b/package/kexec-lite/kexec-lite.mk
@@ -10,5 +10,6 @@ KEXEC_LITE_LICENSE = GPL-2.0+
KEXEC_LITE_LICENSE_FILES = COPYING
KEXEC_LITE_DEPENDENCIES = elfutils dtc
KEXEC_LITE_AUTORECONF = YES
+KEXEC_LITE_SELINUX_MODULES = kdump
$(eval $(autotools-package))
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 7/9] package/kismet: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (5 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 6/9] package/kexec-lite: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 8/9] package/logrotate: " Maxime Chevallier
` (3 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for kismet is provided by the admin/kismet refpolicy
module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/kismet/kismet.mk | 2 ++
1 file changed, 2 insertions(+)
diff --git a/package/kismet/kismet.mk b/package/kismet/kismet.mk
index b39b58d81b..5445db0b1f 100644
--- a/package/kismet/kismet.mk
+++ b/package/kismet/kismet.mk
@@ -17,6 +17,8 @@ KISMET_DEPENDENCIES = \
zlib
KISMET_LICENSE = GPL-2.0+
KISMET_LICENSE_FILES = LICENSE
+KISMET_SELINUX_MODULES = kismet
+
KISMET_CONF_OPTS = --disable-debuglibs
KISMET_CXXFLAGS = $(TARGET_CXXFLAGS)
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 8/9] package/logrotate: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (6 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 7/9] package/kismet: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 9/9] package/mcelog: " Maxime Chevallier
` (2 subsequent siblings)
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for logrotate is added by the admin/logrotate refpolicy
module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/logrotate/logrotate.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/logrotate/logrotate.mk b/package/logrotate/logrotate.mk
index 747d8c2930..3614298f3a 100644
--- a/package/logrotate/logrotate.mk
+++ b/package/logrotate/logrotate.mk
@@ -10,6 +10,7 @@ LOGROTATE_LICENSE = GPL-2.0+
LOGROTATE_LICENSE_FILES = COPYING
LOGROTATE_CPE_ID_VALID = YES
LOGROTATE_DEPENDENCIES = popt host-pkgconf
+LOGROTATE_SELINUX_MODULES = logrotate
# tarball does not have a generated configure script
LOGROTATE_AUTORECONF = YES
LOGROTATE_CONF_ENV = LIBS="`$(PKG_CONFIG_HOST_BINARY) --libs popt`"
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 9/9] package/mcelog: add SELinux refpolicy module
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (7 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 8/9] package/logrotate: " Maxime Chevallier
@ 2021-01-28 9:27 ` Maxime Chevallier
2021-01-28 14:22 ` [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Antoine Tenart
2021-03-16 22:11 ` Thomas Petazzoni
10 siblings, 0 replies; 13+ messages in thread
From: Maxime Chevallier @ 2021-01-28 9:27 UTC (permalink / raw)
To: buildroot
SELinux support for mcelog is added by the admin/mcelog refpolicy
module.
Signed-off-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
---
package/mcelog/mcelog.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/mcelog/mcelog.mk b/package/mcelog/mcelog.mk
index c24366546c..9245825430 100644
--- a/package/mcelog/mcelog.mk
+++ b/package/mcelog/mcelog.mk
@@ -8,6 +8,7 @@ MCELOG_VERSION = 172
MCELOG_SITE = $(call github,andikleen,mcelog,v$(MCELOG_VERSION))
MCELOG_LICENSE = GPL-2.0
MCELOG_LICENSE_FILES = LICENSE
+MCELOG_SELINUX_MODULES = mcelog
define MCELOG_BUILD_CMDS
$(MAKE) $(TARGET_CONFIGURE_OPTS) -C $(@D) all
--
2.25.4
^ permalink raw reply related [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (8 preceding siblings ...)
2021-01-28 9:27 ` [Buildroot] [PATCH 9/9] package/mcelog: " Maxime Chevallier
@ 2021-01-28 14:22 ` Antoine Tenart
2021-03-16 22:11 ` Thomas Petazzoni
10 siblings, 0 replies; 13+ messages in thread
From: Antoine Tenart @ 2021-01-28 14:22 UTC (permalink / raw)
To: buildroot
Hi Maxime,
Quoting Maxime Chevallier (2021-01-28 10:27:48)
>
> This series is a second batch of patches adding a match between packages
> and their corresponding module in the SELinux refpolicy.
>
> This series focuses on the following packages :
>
> - alsa-utils (for alsa-ctl)
> - bridge-utils (for brctl)
> - dmidecode
> - hwloc
> - kexec and kexec-lite
> - kismet
> - logrotate
> - mcelog
>
> Maxime Chevallier (9):
> package/alsa-utils: add SELinux repolicy module
> package/bridge-utils: add SELinux refpolicy module
> package/dmidecode: add SELinux refpolicy module
> package/hwloc: add SELinux refpolicy module
> package/kexec: add SELinux refpolicy module
> package/kexec-lite: add SELinux refpolicy module
> package/kismet: add SELinux refpolicy module
> package/logrotate: add SELinux refpolicy module
> package/mcelog: add SELinux refpolicy module
LGTM, thanks!
Antoine
^ permalink raw reply [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
` (9 preceding siblings ...)
2021-01-28 14:22 ` [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Antoine Tenart
@ 2021-03-16 22:11 ` Thomas Petazzoni
2021-03-19 17:21 ` Peter Korsgaard
10 siblings, 1 reply; 13+ messages in thread
From: Thomas Petazzoni @ 2021-03-16 22:11 UTC (permalink / raw)
To: buildroot
On Thu, 28 Jan 2021 10:27:48 +0100
Maxime Chevallier <maxime.chevallier@bootlin.com> wrote:
> Maxime Chevallier (9):
> package/alsa-utils: add SELinux repolicy module
> package/bridge-utils: add SELinux refpolicy module
> package/dmidecode: add SELinux refpolicy module
> package/hwloc: add SELinux refpolicy module
> package/kexec: add SELinux refpolicy module
> package/kexec-lite: add SELinux refpolicy module
> package/kismet: add SELinux refpolicy module
> package/logrotate: add SELinux refpolicy module
> package/mcelog: add SELinux refpolicy module
Thanks, series applied!
Thomas
--
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 13+ messages in thread
* [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages
2021-03-16 22:11 ` Thomas Petazzoni
@ 2021-03-19 17:21 ` Peter Korsgaard
0 siblings, 0 replies; 13+ messages in thread
From: Peter Korsgaard @ 2021-03-19 17:21 UTC (permalink / raw)
To: buildroot
>>>>> "Thomas" == Thomas Petazzoni <thomas.petazzoni@bootlin.com> writes:
> On Thu, 28 Jan 2021 10:27:48 +0100
> Maxime Chevallier <maxime.chevallier@bootlin.com> wrote:
>> Maxime Chevallier (9):
>> package/alsa-utils: add SELinux repolicy module
>> package/bridge-utils: add SELinux refpolicy module
>> package/dmidecode: add SELinux refpolicy module
>> package/hwloc: add SELinux refpolicy module
>> package/kexec: add SELinux refpolicy module
>> package/kexec-lite: add SELinux refpolicy module
>> package/kismet: add SELinux refpolicy module
>> package/logrotate: add SELinux refpolicy module
>> package/mcelog: add SELinux refpolicy module
> Thanks, series applied!
While not exactly bugfixes, they do seem pretty safe and nice to have
when SELinux is used, so applied to 2021.02.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 13+ messages in thread
end of thread, other threads:[~2021-03-19 17:21 UTC | newest]
Thread overview: 13+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-28 9:27 [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 1/9] package/alsa-utils: add SELinux repolicy module Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 2/9] package/bridge-utils: add SELinux refpolicy module Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 3/9] package/dmidecode: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 4/9] package/hwloc: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 5/9] package/kexec: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 6/9] package/kexec-lite: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 7/9] package/kismet: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 8/9] package/logrotate: " Maxime Chevallier
2021-01-28 9:27 ` [Buildroot] [PATCH 9/9] package/mcelog: " Maxime Chevallier
2021-01-28 14:22 ` [Buildroot] [PATCH 0/9] packages: Add more SELinux modules to some packages Antoine Tenart
2021-03-16 22:11 ` Thomas Petazzoni
2021-03-19 17:21 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.