From 88b236f0545f012293ba5570e1d869268eda97aa Mon Sep 17 00:00:00 2001 From: Dmitry Eremin-Solenikov Date: Wed, 22 Apr 2015 01:27:28 +0300 Subject: selinux-config: allow to override 'enforcing' status of SELinux Move the 'enforcing' setting to the DEFAULT_ENFORCING variable to allow one to override that setting in a bbappend file. Signed-off-by: Dmitry Eremin-Solenikov Signed-off-by: Joe MacDonald --- recipes-security/selinux/selinux-config_0.1.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-security/selinux/selinux-config_0.1.bb b/recipes-security/selinux/selinux-config_0.1.bb index 6af9c54..09bb823 100644 --- a/recipes-security/selinux/selinux-config_0.1.bb +++ b/recipes-security/selinux/selinux-config_0.1.bb @@ -1,4 +1,5 @@ DEFAULT_POLICY = "mls" +DEFAULT_ENFORCING = "enforcing" SUMMARY = "SELinux configuration" DESCRIPTION = "\ @@ -33,7 +34,7 @@ do_install () { # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. -SELINUX=enforcing +SELINUX=${DEFAULT_ENFORCING} # SELINUXTYPE= can take one of these two values: # standard - Standard Security protection. # mls - Multi Level Security protection. -- cgit v1.2.3-54-g00ecf