From 400c60cafb44642d41b76655142e8dfab11ef996 Mon Sep 17 00:00:00 2001 From: Shrikant Bobade Date: Mon, 3 Aug 2015 19:05:21 +0530 Subject: refpolicy-targeted: update base refpolicy to git repo A simple forward-port of refpolicy-targeted to use the refpolicy from git repository. Signed-off-by: Shrikant Bobade Signed-off-by: Joe MacDonald --- recipes-security/refpolicy/refpolicy-targeted_git.bb | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-targeted_git.bb diff --git a/recipes-security/refpolicy/refpolicy-targeted_git.bb b/recipes-security/refpolicy/refpolicy-targeted_git.bb new file mode 100644 index 0000000..b169604 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-targeted_git.bb @@ -0,0 +1,20 @@ +SUMMARY = "SELinux targeted policy" +DESCRIPTION = "\ +This is the targeted variant of the SELinux reference policy. Most service \ +domains are locked down. Users and admins will login in with unconfined_t \ +domain, so they have the same access to the system as if SELinux was not \ +enabled. \ +" + +FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-${PV}:" + +POLICY_NAME = "targeted" +POLICY_TYPE = "mcs" +POLICY_MLS_SENS = "0" + +include refpolicy_${PV}.inc + +SRC_URI += " \ + file://refpolicy-fix-optional-issue-on-sysadm-module.patch \ + file://refpolicy-unconfined_u-default-user.patch \ + " -- cgit v1.2.3-54-g00ecf