From 831f953a4973ec45c8924858b0c2c56044c85a47 Mon Sep 17 00:00:00 2001
From: Wenzong Fan <wenzong.fan@windriver.com>
Date: Mon, 27 Jan 2014 00:26:05 -0500
Subject: selinux: set policy-version to 28

The default policy version of new selinux toolchains is 29, to
fit kernel 3.10.x, set it to 28.
---
 recipes-security/refpolicy/refpolicy_common.inc | 2 ++
 recipes-security/selinux/libsemanage.inc        | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index 6bf7830..fbf9441 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
 path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
 args = \$@
 [end]
+
+policy-version = 28
 EOF
 	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
 	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
index 5e90c26..d01bf6f 100644
--- a/recipes-security/selinux/libsemanage.inc
+++ b/recipes-security/selinux/libsemanage.inc
@@ -41,6 +41,10 @@ do_install() {
             DESTDIR=${D} \
             PYLIBVER='python${PYTHON_BASEVERSION}' \
             PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+    # Update "policy-version" for semanage.conf
+    sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
+	${D}/etc/selinux/semanage.conf
 }
 
 BBCLASSEXTEND = "native"
-- 
cgit v1.2.3-54-g00ecf