refpolicy: add user_tty_device_t into customizable_types

Add user_tty_device_t as a customizable_type, so that restorecon -R
/dev will not complain about it or modify the security labels.

Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>

2 files changed, 10 insertions, 0 deletions

diff --git a/recipes-security/refpolicy/files/customizable_types b/recipes-security/refpolicy/files/customizable_types
new file mode 100644
index 0000000..527d835
--- /dev/null
+++ b/recipes-security/refpolicy/files/customizable_types
@@ -0,0 +1 @@
+user_tty_device_t
diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index bbbbfc3..cb72b21 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -1,8 +1,14 @@
+PRINC = "1"
+
 SECTION = "base"
 LICENSE = "GPLv2"
 
 LIC_FILES_CHKSUM = "file://${S}/COPYING;md5=393a5ca445f6965873eca0259a17f833"
 
+# Specific config files for Poky
+SRC_URI += "file://customizable_types \
+           "
+
 S = "${WORKDIR}/refpolicy"
 
 FILES_${PN} = "${sysconfdir}/selinux/${POLICY_NAME}/ \
@@ -66,4 +72,7 @@ EOF
         # Create policy store and build the policy
         semodule -p ${D} -s ${POLICY_NAME} -n -B
         rm -f ${D}${sysconfdir}/selinux/semanage.conf
+
+        cat ${WORKDIR}/customizable_types >> \
+                ${D}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types
 }