From 52e13930757b5b986b40a6e2cb58e40bbe5758b7 Mon Sep 17 00:00:00 2001 From: Philip Tricca Date: Tue, 29 Oct 2013 23:44:22 +0000 Subject: Add recipe to build the MCS refpolicy. This is the default policy type used by most (all?) distros that support SELinux. Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald --- .../refpolicy/refpolicy-mcs_2.20130424.bb | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb diff --git a/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb b/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb new file mode 100644 index 0000000..38b78f1 --- /dev/null +++ b/recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb @@ -0,0 +1,23 @@ +SUMMARY = "MCS (Multi Category Security) variant of the SELinux policy" +DESCRIPTION = "\ +This is the reference policy for SE Linux built with MCS support. \ +An MCS policy is the same as an MLS policy but with only one sensitivity \ +level. This is useful on systems where a hierarchical policy (MLS) isn't \ +needed (pretty much all systems) but the non-hierarchical categories are. \ +" + +PR = "r0" + +POLICY_NAME = "mcs" +POLICY_TYPE = "mcs" +POLICY_DISTRO = "redhat" +POLICY_UBAC = "n" +POLICY_UNK_PERMS = "allow" +POLICY_DIRECT_INITRC = "n" +POLICY_MONOLITHIC = "n" +POLICY_CUSTOM_BUILDOPT = "" +POLICY_QUIET = "y" + +POLICY_MCS_CATS = "1024" + +include refpolicy_${PV}.inc -- cgit v1.2.3-54-g00ecf