summaryrefslogtreecommitdiffstats
path: root/recipes-security/selinux
Commit message (Collapse)AuthorAgeFilesLines
* policycoreutils: target build alway need libcgroup&libcap-ngXin Ouyang2013-02-171-2/+4
| | | | | | | Target package policycoreutils-sandbox always needs libcgroup and libcap-ng, so it should not be conditional. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libsemanage: fix incorrect path for nologinXin Ouyang2013-02-173-4/+43
| | | | | | | shadow package of oe-core and Debian has installed nologin into /usr/sbin, so fix this path. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: inherit selinuxXin Ouyang2013-01-221-5/+5
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux packages: create include files.Xin Ouyang2013-01-0519-485/+285
| | | | | | | | | | | | Create include files for selinux userspace packages: * checkpolicy.inc * libselinux.inc * libsemanage.inc * libsepol.inc * policycoreutils.inc * sepolgen.inc Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libsemanage: fix path length limits.Xin Ouyang2012-12-253-8/+38
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: install init script under /etc/init.d/Roy.Li2012-12-122-2/+4
| | | | | Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* checkpolicy+libsemanage: flex+bison native dependsXin Ouyang2012-11-304-8/+8
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux-config: update the init scriptXin Ouyang2012-11-192-11/+41
| | | | | | | Fix the hard-coded security type for /dev/null and /dev/console. Check rootfs if support xattrs before do relabel. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: backport to remove empty po filesXin Ouyang2012-11-013-2/+3813
| | | | | | | et, gl, and id .po files contained no translations. This can cause build errors. Delete those puppies. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux-config: add init scriptXin Ouyang2012-10-182-2/+53
| | | | | | | | | | | This script will be installed as 0selinux-init, in runlevel S and sequence number 0. It will start before any other init script. * relabel /dev for restorecon/fixfiles running * rebuild policy and relabel the rootfs if /.autorelabel placed. * relabel the rootfs if it is first booting. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: add pam config for newrole/run_initXin Ouyang2012-10-184-9/+52
| | | | | | Also fix missing RDEPENDS for setools-* Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: disable QA checkes for fixfiles.Xin Ouyang2012-10-112-2/+6
| | | | | | | | | | | | | | | | fixfiles in /sbin would run some /usr/bin binaries to cause these QA warnings. WARNING: Shell scripts in base_bindir and base_sbindir should not reference anything in exec_prefix Since fixfiles is installed into /sbin in most Linux distros, changing this path may cause runtime errors for some hard coded binaries. So, disable unsafe-references-in-scripts QA checkes. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libselinux: fix Public Domain license warning.Xin Ouyang2012-10-092-4/+4
| | | | | | | The "Public Domain" license now has a common license file placed as PD in Poky/oe-core, so fix this. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux recipes: inherit pythonnativeXin Ouyang2012-09-264-8/+12
| | | | | | | With new changes in oe-core, recipes which need python-native should "inherit pythonnative". Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: fix build with pam DISTRO_FEATUREXin Ouyang2012-09-242-4/+4
| | | | | | | If no pam DISTRO_FEATURE, policycoreutils should not build with libpam headers and libraries. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: rewrite DEPENDS for libcap-ng&libcgroup&pamXin Ouyang2012-08-171-2/+2
| | | | | | | | | EXTRA_DEPENDS is still not null while building native packages, this will add useless depends for libcap-ng&libcgroup&pam and cause build errors. So rewrite these DEPENDS. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libselinux: Fix indent warning for python codes.Xin Ouyang2012-08-172-10/+10
| | | | | | | | | Fix these warnings: =================== WARNING: Variable get_git_policyconfigarch contains tabs, please remove these(....) Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: remove format-security from CFLAGS.Xin Ouyang2012-07-233-2/+35
| | | | | | | | Remove -Wno-error=format-security from CFLAGS. and add a patch so we can build policycoreutils if -Werror=format-security enabled. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* python-ipy: rename to fix opkg-build error.Xin Ouyang2012-06-292-2/+2
| | | | | | *** Error: Package name contains illegal characters, (other than [a-z0-9.+-]) Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux: Add bb for default selinux config.Xin Ouyang2012-06-151-0/+33
| | | | | | Now, the default policy is "mls". Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libselinux_git.bb: Add workaround for bitbake parse issueMark Hatle2012-06-011-2/+2
| | | | | | | | | See Yocto Project bugzilla: https://bugzilla.yoctoproject.org/show_bug.cgi?id=2530 This is a temporary workaround to the parsing issue. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Remove obsolete versionMark Hatle2012-05-189-691/+0
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* checkpolicy: Add flex to the DEPENDSMark Hatle2012-05-182-2/+2
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Remove unnecessary anonymous python blocksJoe MacDonald2012-05-184-22/+14
| | | | | | | | | | | | | | | | | libselinux was attempting to ensure ARCH was set to i386 for any i*86 platform. Replaced the existing code with a simpler construct that accomplishes the same goal. A similar anonymous python block was being used in policycoreutils to identify an optional dependency on libcap-ng and libcgroup. Also replaced with a simpler construct. The newest policycoreutils depends on them both anyway in the current configuration. Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Added _git versions. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Change default preferences away from git versionJoe MacDonald2012-05-186-0/+6
| | | | | | | | | | | The preferred versions hould always be the latest stable, not the git recipe. Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Revised summary commit message, and added addition _git recipes. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* policycoreutils: Fix depends for target build.Xin Ouyang2012-04-271-2/+10
|
* libselinux: Fix selinux_init_load_policy() for sysvinit.Xin Ouyang2012-04-172-0/+29
| | | | | With sysvinit, selinux_init_load_policy() will fail since sysfs is still not mounted.
* Pick selinux(v2.20120215) bb changes to git bb recipes.Xin Ouyang2012-04-115-16/+41
| | | | | | | | | selinux packages v2.20120215: * libselinux-2.1.9 * libsemanage-2.1.6 * checkpolicy-2.1.8 * policycoreutils-2.1.10 * sepolgen-1.1.5
* libsemanage: Use alternate root while cross-compiling.Xin Ouyang2012-04-102-0/+123
|
* policycoreutils: Fix depands for the target&native.Xin Ouyang2012-03-271-8/+9
|
* libsemanage: Patch to fix segfaults on Ubuntu.Xin Ouyang2012-03-272-0/+31
|
* libsemanage: Change to the default install path.Xin Ouyang2012-03-271-5/+9
|
* sepolgen: Beautify the decription.Xin Ouyang2012-03-271-1/+13
|
* checkpolicy: Beautify the decription.Xin Ouyang2012-03-271-1/+7
|
* libselinux: Change license type to "Public Domain"Xin Ouyang2012-03-271-1/+1
|
* libsepol: Apply ranlib patch for cross compiling.Xin Ouyang2012-02-213-0/+35
|
* Add bb recipes for new release 2012-02-16.Xin Ouyang2012-02-207-0/+243
|
* Modify git inc file to use the common inc file.Xin Ouyang2012-02-201-21/+1
|
* Add selinux common include file for build.Xin Ouyang2012-02-201-0/+21
|
* Move S from bb recipes to selinux_git.inc.Xin Ouyang2012-02-207-6/+5
|
* Add PV infomation for git bb recipes.Xin Ouyang2012-02-206-1/+6
|
* Rename all git bb recipes.Xin Ouyang2012-02-207-0/+0
|
* libselinux: Fix the ARCH variable while building.Xin Ouyang2012-02-171-0/+9
|
* Fix build issue for null MAKEFLAGS passed to oe_runmake.Xin Ouyang2012-02-172-9/+6
| | | | | | | EXTRA_OEMAKE is typically: -e MAKEFLAGS= Because of "MAKEFLAGS= ", ENV variables will not pass to subdirs. This may cause some selinux packages build failed while cross-building, so we redefine EXTRA_OEMAKE here.
* libsemanage: Add a patch to fix a segfault bug.Xin Ouyang2012-02-162-0/+39
|
* policycoreutils: Only build needed cmds for native.Xin Ouyang2012-02-161-3/+16
|
* selinux: bb recipes for SELinux from git source.Xin Ouyang2012-02-136-0/+213
| | | | | | | | | | Since commit 60b2092e, we have these: checkpolicy v2.1.8 libselinux v2.1.9 libsemanage v2.1.6 libsepol v2.1.4 policycoreutils v2.1.10 sepolgen v1.1.5
* selinux: Add git inc file for selinux bb recipes.Xin Ouyang2012-02-061-0/+20
|
* policycoreutils: Add version 2.1.0Mark Hatle2012-01-172-0/+557
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* checkpolicy: Add version 2.1.0Mark Hatle2012-01-172-0/+35
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>