diff options
author | Shrikant Bobade <shrikant_bobade@mentor.com> | 2015-07-30 19:06:29 +0530 |
---|---|---|
committer | Joe MacDonald <joe_macdonald@mentor.com> | 2015-08-07 16:48:19 -0400 |
commit | c687df118d3b5c126454e8490fd46b3958341770 (patch) | |
tree | 4c738db4b43e043a3a623687cebcca3436162969 | |
parent | e0ed069077f1276f9dd2b7670812b1f7f1639282 (diff) | |
download | meta-selinux-c687df118d3b5c126454e8490fd46b3958341770.tar.gz |
refpolicy-targeted: update base refpolicy 20141203
A simple forward-port of refpolicy-targeted to use the 20141203
base refpolicy.
Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
-rw-r--r-- | recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb b/recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb new file mode 100644 index 0000000..b169604 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-targeted_2.20141203.bb | |||
@@ -0,0 +1,20 @@ | |||
1 | SUMMARY = "SELinux targeted policy" | ||
2 | DESCRIPTION = "\ | ||
3 | This is the targeted variant of the SELinux reference policy. Most service \ | ||
4 | domains are locked down. Users and admins will login in with unconfined_t \ | ||
5 | domain, so they have the same access to the system as if SELinux was not \ | ||
6 | enabled. \ | ||
7 | " | ||
8 | |||
9 | FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-${PV}:" | ||
10 | |||
11 | POLICY_NAME = "targeted" | ||
12 | POLICY_TYPE = "mcs" | ||
13 | POLICY_MLS_SENS = "0" | ||
14 | |||
15 | include refpolicy_${PV}.inc | ||
16 | |||
17 | SRC_URI += " \ | ||
18 | file://refpolicy-fix-optional-issue-on-sysadm-module.patch \ | ||
19 | file://refpolicy-unconfined_u-default-user.patch \ | ||
20 | " | ||