summaryrefslogtreecommitdiffstats
path: root/recipes-security
Commit message (Collapse)AuthorAgeFilesLines
...
* selinux recipes: inherit pythonnativeXin Ouyang2012-09-265-10/+14
| | | | | | | With new changes in oe-core, recipes which need python-native should "inherit pythonnative". Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: fix build with pam DISTRO_FEATUREXin Ouyang2012-09-242-4/+4
| | | | | | | If no pam DISTRO_FEATURE, policycoreutils should not build with libpam headers and libraries. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* setools: inherit pythonnativeXin Ouyang2012-09-201-3/+3
| | | | | | | With new changes in oe-core, recipes which need python-native should "inherit pythonnative". Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit-2.2.1: copy bits/socket_type.h only if it existsXin Ouyang2012-09-071-2/+6
| | | | | | | | | eglibc-2.16 splits enum __socket_type from bits/socket.h to bits/socket_type.h, so old eglibc does not have bits/socket_type.h We should copy it only if it exists. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux-task: add necessary packages for selinuxXin Ouyang2012-08-211-0/+4
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: rewrite DEPENDS for libcap-ng&libcgroup&pamXin Ouyang2012-08-171-2/+2
| | | | | | | | | EXTRA_DEPENDS is still not null while building native packages, this will add useless depends for libcap-ng&libcgroup&pam and cause build errors. So rewrite these DEPENDS. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libselinux: Fix indent warning for python codes.Xin Ouyang2012-08-172-10/+10
| | | | | | | | | Fix these warnings: =================== WARNING: Variable get_git_policyconfigarch contains tabs, please remove these(....) Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit-2.2.1: Add bits/socket_type.h from target libc-headers.Xin Ouyang2012-08-171-0/+1
| | | | | | | | We have copied some target kernel headers in 72fb6da. We may get build failures because of missing bits/socket_type.h on some hosts, so add it. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit: inherit pythonnativeXin Ouyang2012-08-032-2/+2
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* policycoreutils: remove format-security from CFLAGS.Xin Ouyang2012-07-233-2/+35
| | | | | | | | Remove -Wno-error=format-security from CFLAGS. and add a patch so we can build policycoreutils if -Werror=format-security enabled. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* refpolicy: add policy patches for Yocto.Xin Ouyang2012-07-194-0/+1591
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux-task: add selinux-configXin Ouyang2012-07-191-0/+1
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* python-ipy: rename to fix opkg-build error.Xin Ouyang2012-06-292-2/+2
| | | | | | *** Error: Package name contains illegal characters, (other than [a-z0-9.+-]) Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit: Add .h files from target libc-headers.Xin Ouyang2012-06-281-0/+16
| | | | | | | | | | | | | Just like audit_2.1.3.bb. The executables in lib/, which are named as gen_*_h, will run on the hosts to create *_tables.h/*tabs.h header files for the targets. In some old hosts, build will fail because .h files in the old linux-libc-headers (<= 2.6.29) has incomplete DEFINE lists for the audit system. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit: fix python header path in configure.acXin Ouyang2012-06-202-1/+31
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* audit: Uprev auditAmy Fong2012-06-184-0/+554
| | | | | | | | | | | The recipe is derived from 2.1.3 with some changes made. 1. configuration files are updated to look for sbin binaries in /usr/sbin 2. a init.d file was derived from Debian to work with busybox's start-stop-daemon 3. the plugin package contents was fine tuned as some of the files from 2.1.3 were required to let audit run. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Add bb for default selinux config.Xin Ouyang2012-06-151-0/+33
| | | | | | Now, the default policy is "mls". Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* refpolicy*: Add RDEPENDS and fix PACKAGE_ARCH.Xin Ouyang2012-06-121-0/+3
| | | | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* libselinux_git.bb: Add workaround for bitbake parse issueMark Hatle2012-06-011-2/+2
| | | | | | | | | See Yocto Project bugzilla: https://bugzilla.yoctoproject.org/show_bug.cgi?id=2530 This is a temporary workaround to the parsing issue. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* audit: Add audit.h from target libc-headers.Xin Ouyang2012-05-311-0/+11
| | | | | | | | | | | The executables in lib/, which are named as gen_*_h, will run on the hosts to create *_tables.h/*tabs.h header files for the targets. In some old hosts, build will fail because audit.h in the old linux-libc-headers (<= 2.6.29) has a incomplete netlink message list for the audit system. Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
* selinux: Remove obsolete versionMark Hatle2012-05-189-691/+0
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* checkpolicy: Add flex to the DEPENDSMark Hatle2012-05-182-2/+2
| | | | Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Remove unnecessary anonymous python blocksJoe MacDonald2012-05-184-22/+14
| | | | | | | | | | | | | | | | | libselinux was attempting to ensure ARCH was set to i386 for any i*86 platform. Replaced the existing code with a simpler construct that accomplishes the same goal. A similar anonymous python block was being used in policycoreutils to identify an optional dependency on libcap-ng and libcgroup. Also replaced with a simpler construct. The newest policycoreutils depends on them both anyway in the current configuration. Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Added _git versions. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* selinux: Change default preferences away from git versionJoe MacDonald2012-05-186-0/+6
| | | | | | | | | | | The preferred versions hould always be the latest stable, not the git recipe. Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Revised summary commit message, and added addition _git recipes. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
* policycoreutils: Fix depends for target build.Xin Ouyang2012-04-271-2/+10
|
* libselinux: Fix selinux_init_load_policy() for sysvinit.Xin Ouyang2012-04-172-0/+29
| | | | | With sysvinit, selinux_init_load_policy() will fail since sysfs is still not mounted.
* image: Basic image for SELinux features.Xin Ouyang2012-04-171-0/+13
|
* selinux-task: Add refpolicy-*.Xin Ouyang2012-04-171-0/+2
|
* Pick selinux(v2.20120215) bb changes to git bb recipes.Xin Ouyang2012-04-115-16/+41
| | | | | | | | | selinux packages v2.20120215: * libselinux-2.1.9 * libsemanage-2.1.6 * checkpolicy-2.1.8 * policycoreutils-2.1.10 * sepolgen-1.1.5
* refpolicy*: Add filelist for binary packages.Xin Ouyang2012-04-101-0/+3
|
* refpolicy*: Rename bb recipe of standard policy.Xin Ouyang2012-04-101-0/+0
|
* refpolicy*: SELinux policy init version.Xin Ouyang2012-04-104-0/+107
|
* libsemanage: Use alternate root while cross-compiling.Xin Ouyang2012-04-102-0/+123
|
* selinux-task: Add setools.Xin Ouyang2012-03-271-0/+1
|
* setools: Patch for neverallow rules.Xin Ouyang2012-03-272-0/+32
|
* setools: Remove the python disabled patch.Xin Ouyang2012-03-272-31/+0
| | | | Before the python modules are needed by policycoreutils.
* setools: Fix depends and file list.Xin Ouyang2012-03-271-1/+46
|
* policycoreutils: Fix depands for the target&native.Xin Ouyang2012-03-271-8/+9
|
* libsemanage: Patch to fix segfaults on Ubuntu.Xin Ouyang2012-03-272-0/+31
|
* libsemanage: Change to the default install path.Xin Ouyang2012-03-271-5/+9
|
* audit: Add a patch for cross compiling.Xin Ouyang2012-03-272-0/+259
|
* sepolgen: Beautify the decription.Xin Ouyang2012-03-271-1/+13
|
* checkpolicy: Beautify the decription.Xin Ouyang2012-03-271-1/+7
|
* libselinux: Change license type to "Public Domain"Xin Ouyang2012-03-271-1/+1
|
* setools: Add version 3.3.7.Xin Ouyang2012-03-0816-0/+5181
|
* libcap-ng: Add new version 0.6.6Xin Ouyang2012-02-281-0/+31
|
* libcap-ng: Fix compile issue for PYLIBVER.Xin Ouyang2012-02-281-1/+1
|
* ustr: Move ustr to recipes-extended.Xin Ouyang2012-02-223-295/+0
|
* libsepol: Apply ranlib patch for cross compiling.Xin Ouyang2012-02-213-0/+35
|
* Add bb recipes for new release 2012-02-16.Xin Ouyang2012-02-207-0/+243
|