diff options
author | Philip Tricca <flihp@twobit.us> | 2013-10-29 23:44:22 +0000 |
---|---|---|
committer | Joe MacDonald <joe@deserted.net> | 2013-10-30 10:05:18 -0400 |
commit | 52e13930757b5b986b40a6e2cb58e40bbe5758b7 (patch) | |
tree | e3d033c0fa791201410b9c2f654e1724067a0572 | |
parent | dfdf551481ced8a8f24ac79addb209ebd90d5375 (diff) | |
download | meta-selinux-52e13930757b5b986b40a6e2cb58e40bbe5758b7.tar.gz |
Add recipe to build the MCS refpolicy.
This is the default policy type used by most (all?) distros that
support SELinux.
Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Joe MacDonald <joe@deserted.net>
-rw-r--r-- | recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb b/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb new file mode 100644 index 0000000..38b78f1 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb | |||
@@ -0,0 +1,23 @@ | |||
1 | SUMMARY = "MCS (Multi Category Security) variant of the SELinux policy" | ||
2 | DESCRIPTION = "\ | ||
3 | This is the reference policy for SE Linux built with MCS support. \ | ||
4 | An MCS policy is the same as an MLS policy but with only one sensitivity \ | ||
5 | level. This is useful on systems where a hierarchical policy (MLS) isn't \ | ||
6 | needed (pretty much all systems) but the non-hierarchical categories are. \ | ||
7 | " | ||
8 | |||
9 | PR = "r0" | ||
10 | |||
11 | POLICY_NAME = "mcs" | ||
12 | POLICY_TYPE = "mcs" | ||
13 | POLICY_DISTRO = "redhat" | ||
14 | POLICY_UBAC = "n" | ||
15 | POLICY_UNK_PERMS = "allow" | ||
16 | POLICY_DIRECT_INITRC = "n" | ||
17 | POLICY_MONOLITHIC = "n" | ||
18 | POLICY_CUSTOM_BUILDOPT = "" | ||
19 | POLICY_QUIET = "y" | ||
20 | |||
21 | POLICY_MCS_CATS = "1024" | ||
22 | |||
23 | include refpolicy_${PV}.inc | ||