diff options
| author | Philip Tricca <flihp@twobit.us> | 2013-09-26 04:58:27 +0000 |
|---|---|---|
| committer | Joe MacDonald <joe@deserted.net> | 2013-09-26 09:04:37 -0400 |
| commit | 8de3944f4d41e56417cce699fd2970b4f64bae2c (patch) | |
| tree | e8a76b640ca2887faf1214a9fb285018686c73d0 | |
| parent | 91fc10df2f2158cb6ae892636e8cff00c3479f42 (diff) | |
| download | meta-selinux-8de3944f4d41e56417cce699fd2970b4f64bae2c.tar.gz | |
Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.
Currently logins to core-image-selinux images through a getty (serial)
fail. This is caused by the use of the busybox getty. SELinux depends
on executable files and their labels to transition between types.
The symlink to busybox is not sufficient to cause the getty processes
to transition to the right SELinux context. Using a getty binary
like the one provided by util-linux fixes this.
Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Joe MacDonald <joe@deserted.net>
| -rw-r--r-- | recipes-security/images/core-image-selinux.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/recipes-security/images/core-image-selinux.bb b/recipes-security/images/core-image-selinux.bb index 0109933..1ec7b08 100644 --- a/recipes-security/images/core-image-selinux.bb +++ b/recipes-security/images/core-image-selinux.bb | |||
| @@ -6,6 +6,7 @@ LICENSE = "MIT" | |||
| 6 | 6 | ||
| 7 | IMAGE_INSTALL = "\ | 7 | IMAGE_INSTALL = "\ |
| 8 | ${CORE_IMAGE_BASE_INSTALL} \ | 8 | ${CORE_IMAGE_BASE_INSTALL} \ |
| 9 | util-linux-agetty \ | ||
| 9 | packagegroup-core-basic \ | 10 | packagegroup-core-basic \ |
| 10 | packagegroup-core-selinux \ | 11 | packagegroup-core-selinux \ |
| 11 | " | 12 | " |