diff options
author | Shrikant Bobade <shrikant_bobade@mentor.com> | 2016-07-01 18:47:22 +0530 |
---|---|---|
committer | Joe MacDonald <joe_macdonald@mentor.com> | 2016-07-04 15:42:36 -0400 |
commit | 655db117a2f8a6f6d925d8c9f278354710f86df3 (patch) | |
tree | 500fbf045239b1a4e6c99630befee050f9691e85 | |
parent | 9f1bb489ac1685cec8ca318338917d556fd09b86 (diff) | |
download | meta-selinux-655db117a2f8a6f6d925d8c9f278354710f86df3.tar.gz |
README: update with systemd & virtual/refpolicy details
add init manager user guidelines and examples for using refpolicy with
perticular version and type.
Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
-rw-r--r-- | README | 27 |
1 files changed, 25 insertions, 2 deletions
@@ -65,6 +65,8 @@ An "oe-selinux" distribution is also included as a convienence for people | |||
65 | working with this layer, without the additional Poky meta data. This | 65 | working with this layer, without the additional Poky meta data. This |
66 | approach may work, but is not generally tested by the maintainers. | 66 | approach may work, but is not generally tested by the maintainers. |
67 | 67 | ||
68 | e.g. DISTRO="poky-selinux" | ||
69 | |||
68 | 70 | ||
69 | Using different versions of linux-yocto | 71 | Using different versions of linux-yocto |
70 | --------------------------------------- | 72 | --------------------------------------- |
@@ -75,6 +77,7 @@ currently supported: v3.14, v3.19, v4.1(by default). | |||
75 | * enable the preferred linux-yocto to local.conf or oe-selinux.conf | 77 | * enable the preferred linux-yocto to local.conf or oe-selinux.conf |
76 | e.g. PREFERRED_VERSION_linux-yocto_qemuarm = "3.19%" | 78 | e.g. PREFERRED_VERSION_linux-yocto_qemuarm = "3.19%" |
77 | 79 | ||
80 | |||
78 | Using different versions of refpolicy | 81 | Using different versions of refpolicy |
79 | ------------------------------------- | 82 | ------------------------------------- |
80 | To prepare selinux enabled images using different ver. of refpolicy, | 83 | To prepare selinux enabled images using different ver. of refpolicy, |
@@ -86,8 +89,28 @@ By default refpolicy from git builds head commit of master branch, we can update | |||
86 | SRCREV for refpolicy and refpolicy-contrib as appropriate at refpolicy_git.inc | 89 | SRCREV for refpolicy and refpolicy-contrib as appropriate at refpolicy_git.inc |
87 | to check refpolicy as per required commits. | 90 | to check refpolicy as per required commits. |
88 | 91 | ||
89 | * enable the preferred refpolicy-mls to local.conf or oe-selinux.conf | 92 | * enable the preferred refpolicy-minimum to local.conf or oe-selinux.conf |
90 | e.g. REFERRED_VERSION_refpolicy-mls = "2.20140311" | 93 | e.g. PREFERRED_VERSION_refpolicy-minimum = "2.20151208" |
94 | |||
95 | |||
96 | Using perticular refpolicy policy type | ||
97 | -------------------------------------- | ||
98 | Provider "virtual/refpolicy" used to set perticular refpolicy type. | ||
99 | |||
100 | * enabled refpolicy-minimum from refpolicy types at config level | ||
101 | e.g. PREFERRED_PROVIDER_virtual/refpolicy ?= "refpolicy-minimum" | ||
102 | |||
103 | |||
104 | Using different init manager | ||
105 | ---------------------------- | ||
106 | By default selinux enabled images coming up with "sysvinit" as init manager, | ||
107 | we can use "systemd" as an init manager using below changes to local.conf | ||
108 | |||
109 | * enable systemd as init manager changes to local.conf | ||
110 | DISTRO_FEATURES_remove = " sysvinit" | ||
111 | DISTRO_FEATURES_append = " systemd" | ||
112 | VIRTUAL-RUNTIME_init_manager = "systemd" | ||
113 | DISTRO_FEATURES_BACKFILL_CONSIDERED = "" | ||
91 | 114 | ||
92 | 115 | ||
93 | License | 116 | License |