refpolicy: update to 2.20190201 and git HEAD policiesjjm/RELEASE_2.20190201

Additionally, the README has fallen out of date, update it to reflect the
current reality of layer dependencies.

Signed-off-by: Joe MacDonald <joe@deserted.net>

1 files changed, 18 insertions, 4 deletions

diff --git a/recipes-security/refpolicy/refpolicy-targeted_git.bb b/recipes-security/refpolicy/refpolicy-targeted_git.bb
index f795bf7..1ecdb4e 100644
--- a/recipes-security/refpolicy/refpolicy-targeted_git.bb
+++ b/recipes-security/refpolicy/refpolicy-targeted_git.bb
@@ -14,8 +14,22 @@ POLICY_MLS_SENS = "0"
 
 include refpolicy_${PV}.inc
 
+SYSTEMD_REFPOLICY_PATCHES = " \
+        file://0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch \
+        file://0002-refpolicy-minimum-locallogin-add-allow-rules-for-typ.patch \
+        file://0003-refpolicy-minimum-systemd-unconfined-lib-add-systemd.patch \
+        file://0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch \
+        file://0005-refpolicy-minimum-init-fix-reboot-with-systemd-as-in.patch \
+        file://0006-refpolicy-minimum-systemd-mount-enable-required-refp.patch \
+        file://0007-refpolicy-minimum-systemd-fix-for-login-journal-serv.patch \
+        file://0008-refpolicy-minimum-systemd-fix-for-systemd-tmp-files-.patch \
+        file://0009-refpolicy-minimum-systemd-fix-for-syslog.patch \
+        "
+
+SYSVINIT_REFPOLICY_PATCHES = " \
+        file://0001-fix-update-alternatives-for-sysvinit.patch \
+        "
+
 SRC_URI += " \
-            file://refpolicy-fix-optional-issue-on-sysadm-module.patch \
-            file://refpolicy-unconfined_u-default-user.patch \
-            ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'file://refpolicy-remove-duplicate-type_transition.patch', '', d)} \
-           "
+        ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '${SYSTEMD_REFPOLICY_PATCHES}', '${SYSVINIT_REFPOLICY_PATCHES}', d)} \
+        "