refpolicy: standard/mls policy should set UBAC=n

Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>

3 files changed, 5 insertions, 2 deletions

diff --git a/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb b/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb
index 77b7e0f..4d75322 100644
--- a/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb
+++ b/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb
@@ -5,11 +5,12 @@ It allows giving data labels such as \"Top Secret\" and preventing \
 such data from leaking to processes or files with lower classification. \
 "
 
-PR = "r2"
+PR = "r3"
 
 POLICY_NAME = "mls"
 POLICY_TYPE = "mls"
 POLICY_DISTRO = "redhat"
+POLICY_UBAC = "n"
 POLICY_UNK_PERMS = "allow"
 POLICY_DIRECT_INITRC = "n"
 POLICY_MONOLITHIC = "n"
diff --git a/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb b/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb
index 25e94c6..1f3030a 100644
--- a/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb
+++ b/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb
@@ -3,11 +3,12 @@ DESCRIPTION = "\
 This is the reference policy for SELinux built with type enforcement \
 only."
 
-PR = "r2"
+PR = "r3"
 
 POLICY_NAME = "standard"
 POLICY_TYPE = "standard"
 POLICY_DISTRO = "redhat"
+POLICY_UBAC = "n"
 POLICY_UNK_PERMS = "allow"
 POLICY_DIRECT_INITRC = "n"
 POLICY_MONOLITHIC = "n"
diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index f071f71..9c3d050 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -20,6 +20,7 @@ PARALLEL_MAKE = ""
 EXTRA_OEMAKE += "NAME=${POLICY_NAME} \
         TYPE=${POLICY_TYPE} \
         DISTRO=${POLICY_DISTRO} \
+        UBAC=${POLICY_UBAC} \
         UNK_PERMS=${POLICY_UNK_PERMS} \
         DIRECT_INITRC=${POLICY_DIRECT_INITRC} \
         MONOLITHIC=${POLICY_MONOLITHIC} \