From d72b55bc20e2d954edd7179ad75023b97375cb29 Mon Sep 17 00:00:00 2001 From: Xin Ouyang Date: Mon, 26 Nov 2012 18:43:22 +0800 Subject: refpolicy: standard/mls policy should set UBAC=n Signed-off-by: Xin Ouyang --- recipes-security/refpolicy/refpolicy-mls_2.20120725.bb | 3 ++- recipes-security/refpolicy/refpolicy-standard_2.20120725.bb | 3 ++- recipes-security/refpolicy/refpolicy_common.inc | 1 + 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb b/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb index 77b7e0f..4d75322 100644 --- a/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb +++ b/recipes-security/refpolicy/refpolicy-mls_2.20120725.bb @@ -5,11 +5,12 @@ It allows giving data labels such as \"Top Secret\" and preventing \ such data from leaking to processes or files with lower classification. \ " -PR = "r2" +PR = "r3" POLICY_NAME = "mls" POLICY_TYPE = "mls" POLICY_DISTRO = "redhat" +POLICY_UBAC = "n" POLICY_UNK_PERMS = "allow" POLICY_DIRECT_INITRC = "n" POLICY_MONOLITHIC = "n" diff --git a/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb b/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb index 25e94c6..1f3030a 100644 --- a/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb +++ b/recipes-security/refpolicy/refpolicy-standard_2.20120725.bb @@ -3,11 +3,12 @@ DESCRIPTION = "\ This is the reference policy for SELinux built with type enforcement \ only." -PR = "r2" +PR = "r3" POLICY_NAME = "standard" POLICY_TYPE = "standard" POLICY_DISTRO = "redhat" +POLICY_UBAC = "n" POLICY_UNK_PERMS = "allow" POLICY_DIRECT_INITRC = "n" POLICY_MONOLITHIC = "n" diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc index f071f71..9c3d050 100644 --- a/recipes-security/refpolicy/refpolicy_common.inc +++ b/recipes-security/refpolicy/refpolicy_common.inc @@ -20,6 +20,7 @@ PARALLEL_MAKE = "" EXTRA_OEMAKE += "NAME=${POLICY_NAME} \ TYPE=${POLICY_TYPE} \ DISTRO=${POLICY_DISTRO} \ + UBAC=${POLICY_UBAC} \ UNK_PERMS=${POLICY_UNK_PERMS} \ DIRECT_INITRC=${POLICY_DIRECT_INITRC} \ MONOLITHIC=${POLICY_MONOLITHIC} \ -- cgit v1.2.3-54-g00ecf