* [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro
@ 2016-05-10 12:03 Adrian Dudau
2016-05-10 12:03 ` [meta-cgl][PATCH 2/2] selinux: Use targeted refpolicy Adrian Dudau
2016-05-11 15:17 ` [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Alexandru Vaduva
0 siblings, 2 replies; 3+ messages in thread
From: Adrian Dudau @ 2016-05-10 12:03 UTC (permalink / raw)
To: yocto
meta-selinux defines a distro with refpolicy providers. Inherit that
instead of trying to define our own refpolicies.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
---
meta-cgl-common/conf/distro/poky-cgl.conf | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/meta-cgl-common/conf/distro/poky-cgl.conf b/meta-cgl-common/conf/distro/poky-cgl.conf
index 1fd453e..ab102d5 100644
--- a/meta-cgl-common/conf/distro/poky-cgl.conf
+++ b/meta-cgl-common/conf/distro/poky-cgl.conf
@@ -1,7 +1,6 @@
require conf/distro/poky-lsb.conf
+require conf/distro/poky-selinux.conf
DISTRO = "poky-cgl"
-DISTRO_FEATURES_append = " pam selinux"
-
IMAGE_CLASSES += "image_types_uboot"
--
1.9.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [meta-cgl][PATCH 2/2] selinux: Use targeted refpolicy
2016-05-10 12:03 [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Adrian Dudau
@ 2016-05-10 12:03 ` Adrian Dudau
2016-05-11 15:17 ` [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Alexandru Vaduva
1 sibling, 0 replies; 3+ messages in thread
From: Adrian Dudau @ 2016-05-10 12:03 UTC (permalink / raw)
To: yocto
POLICY_NAME and DEFAULT_ENFORCING are set in each refpolicy
recipe in meta-selinux now.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
---
meta-cgl-common/conf/distro/poky-cgl.conf | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-cgl-common/conf/distro/poky-cgl.conf b/meta-cgl-common/conf/distro/poky-cgl.conf
index ab102d5..f6c2d7b 100644
--- a/meta-cgl-common/conf/distro/poky-cgl.conf
+++ b/meta-cgl-common/conf/distro/poky-cgl.conf
@@ -4,3 +4,5 @@ require conf/distro/poky-selinux.conf
DISTRO = "poky-cgl"
IMAGE_CLASSES += "image_types_uboot"
+
+PREFERRED_PROVIDER_virtual/refpolicy="refpolicy-targeted"
--
1.9.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro
2016-05-10 12:03 [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Adrian Dudau
2016-05-10 12:03 ` [meta-cgl][PATCH 2/2] selinux: Use targeted refpolicy Adrian Dudau
@ 2016-05-11 15:17 ` Alexandru Vaduva
1 sibling, 0 replies; 3+ messages in thread
From: Alexandru Vaduva @ 2016-05-11 15:17 UTC (permalink / raw)
To: Adrian Dudau, yocto
[-- Attachment #1: Type: text/plain, Size: 996 bytes --]
ok from my side
On Tuesday, May 10, 2016 3:04 PM, Adrian Dudau <adrian.dudau@enea.com> wrote:
meta-selinux defines a distro with refpolicy providers. Inherit that
instead of trying to define our own refpolicies.
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
---
meta-cgl-common/conf/distro/poky-cgl.conf | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/meta-cgl-common/conf/distro/poky-cgl.conf b/meta-cgl-common/conf/distro/poky-cgl.conf
index 1fd453e..ab102d5 100644
--- a/meta-cgl-common/conf/distro/poky-cgl.conf
+++ b/meta-cgl-common/conf/distro/poky-cgl.conf
@@ -1,7 +1,6 @@
require conf/distro/poky-lsb.conf
+require conf/distro/poky-selinux.conf
DISTRO = "poky-cgl"
-DISTRO_FEATURES_append = " pam selinux"
-
IMAGE_CLASSES += "image_types_uboot"
--
1.9.1
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[-- Attachment #2: Type: text/html, Size: 2083 bytes --]
^ permalink raw reply related [flat|nested] 3+ messages in thread
end of thread, other threads:[~2016-05-11 15:17 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-05-10 12:03 [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Adrian Dudau
2016-05-10 12:03 ` [meta-cgl][PATCH 2/2] selinux: Use targeted refpolicy Adrian Dudau
2016-05-11 15:17 ` [meta-cgl][PATCH 1/2] distro: Inherit SELinux distro Alexandru Vaduva
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.