From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.7 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 12F93C433DB for ; Thu, 28 Jan 2021 03:26:28 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id CEBD464DD0 for ; Thu, 28 Jan 2021 03:26:27 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229545AbhA1D0M (ORCPT ); Wed, 27 Jan 2021 22:26:12 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:41966 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229551AbhA1D0K (ORCPT ); Wed, 27 Jan 2021 22:26:10 -0500 Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E5793C061574 for ; Wed, 27 Jan 2021 19:25:29 -0800 (PST) Received: by mail-ed1-x533.google.com with SMTP id g1so4964801edu.4 for ; Wed, 27 Jan 2021 19:25:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=VOvuR1EHL3auJ3254YzQ2GupogQhN9qNF4C9zwM9XhI=; b=YhhAxygfhvXS5qmo5lVn0nDZzFr4LcEAtYfjJhQs6W6zmeEz73naszBXD2CZSAEVBR sIcOK4Iebzy7qoat4OEW3VRfUCE52BoDOw4ThYMU/RfAZvtKWTs5U5VZ+SuqnkmFIfRN m1utqZWxXQFcCija59PN75ks3k4m7OnXffB1Q7i4bIGZRjQ20XfMXMHKFrshXok6l/T7 raSLuLRd4vLU7c29CUsp7SEkcV7ngLVu48lnhc5UDDZKsylOnQHYzPsCe3wY6Y0BK7/p jzHy0BjyA9AKiMedcHMO24P1E+Tg+AwRqCY0gg7djROoWn6Pmb0HHgHg6KEx0EojJPHx kzRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=VOvuR1EHL3auJ3254YzQ2GupogQhN9qNF4C9zwM9XhI=; b=cZOs4BNdAXFG93YYI6BunhdmpYmvV9ZuylyMr9rHVu6zDnIfQFDN+nnQtWicD0BjXV byHcbpSygM/53U4aEQyZce2ubOhlEVgS/z8RiKnWFNJ5bYZbfI1VQb57GW/eTPjbVO1W sOKzBaQ0UMZ1G5kotJltsYKUihqdL7IWCRQ9BnIDms2UMdXtf4cukwzrjpv91pwAWwkg aszZye7cr1Ie5EvPtMQfuhymWZdLekBNEpMZ4J2OaEzdd95dq+4HknsObhgOIldvb+iV lEvlZX9ccWchb/vdz8CmmkpAKgWiQJESMzaGmaMwS31c/zq3uF9WjnJrYTQWLpY9WImq QpMw== X-Gm-Message-State: AOAM530oElM1pEcg43cc+/6PIDxzhqQetgnbOZIzuXW1OCrB/BvXxqRs O+O7HvagpHjoNEU5636G3SupCtQIYXJXEvIIPUDC X-Google-Smtp-Source: ABdhPJzrFnkX9YvAFy440IPhVOou4kn6nvIS+vV1vMCJ6YfOh8EH27hFCbBDOegTxKe15NSl04Ll4YQ65dOCFS6GGP0= X-Received: by 2002:a05:6402:34e:: with SMTP id r14mr12109648edw.269.1611804328580; Wed, 27 Jan 2021 19:25:28 -0800 (PST) MIME-Version: 1.0 References: <20210127153303.135235-1-richard_c_haines@btinternet.com> In-Reply-To: <20210127153303.135235-1-richard_c_haines@btinternet.com> From: Paul Moore Date: Wed, 27 Jan 2021 22:25:17 -0500 Message-ID: Subject: Re: [PATCH] selinux-notebook: Add new section for Embedded Systems To: Richard Haines Cc: selinux@vger.kernel.org, selinux-refpolicy@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org On Wed, Jan 27, 2021 at 10:33 AM Richard Haines wrote: > > Add a new section and supporting examples for embedded systems. > > Signed-off-by: Richard Haines > --- > Changes from RFC version: Added comments from Dominick, minor text updates > and rework example Makefiles. > > src/embedded_systems.md | 546 ++++++++++++++++++ > src/implementing_seaware_apps.md | 2 +- > .../embedded-policy/android-policy/README.md | 34 ++ > .../android-policy/android-10/Makefile | 42 ++ > .../android-policy/android-4/Makefile | 31 + > .../android-policy/brillo-device/Makefile | 46 ++ > .../android-policy/brillo/Makefile | 38 ++ > .../reference-policy/README.md | 6 + > .../reference-policy/build.conf | 84 +++ > .../reference-policy/modules.conf | 236 ++++++++ > src/seandroid.md | 12 +- > src/section_list.txt | 1 + > src/toc.md | 1 + > 13 files changed, 1074 insertions(+), 5 deletions(-) > create mode 100644 src/embedded_systems.md > create mode 100644 src/notebook-examples/embedded-policy/android-policy/README.md > create mode 100644 src/notebook-examples/embedded-policy/android-policy/android-10/Makefile > create mode 100644 src/notebook-examples/embedded-policy/android-policy/android-4/Makefile > create mode 100644 src/notebook-examples/embedded-policy/android-policy/brillo-device/Makefile > create mode 100644 src/notebook-examples/embedded-policy/android-policy/brillo/Makefile > create mode 100644 src/notebook-examples/embedded-policy/reference-policy/README.md > create mode 100644 src/notebook-examples/embedded-policy/reference-policy/build.conf > create mode 100644 src/notebook-examples/embedded-policy/reference-policy/modules.conf This is great guys - thank you! -- paul moore www.paul-moore.com