From 776da889b550ac9e5be414a8cc10fd86b1923264 Mon Sep 17 00:00:00 2001 From: Joe MacDonald Date: Mon, 8 Apr 2019 13:50:40 -0400 Subject: refpolicy: update to 2.20190201 and git HEAD policies Additionally, the README has fallen out of date, update it to reflect the current reality of layer dependencies. Signed-off-by: Joe MacDonald --- recipes-security/refpolicy/refpolicy_git.inc | 55 ++-------------------------- 1 file changed, 3 insertions(+), 52 deletions(-) (limited to 'recipes-security/refpolicy/refpolicy_git.inc') diff --git a/recipes-security/refpolicy/refpolicy_git.inc b/recipes-security/refpolicy/refpolicy_git.inc index b2fd638..8aeaf27 100644 --- a/recipes-security/refpolicy/refpolicy_git.inc +++ b/recipes-security/refpolicy/refpolicy_git.inc @@ -1,58 +1,9 @@ -PV = "2.20170805+git${SRCPV}" +PV = "2.20190201+git${SRCPV}" -SRC_URI = "git://github.com/TresysTechnology/refpolicy.git;protocol=git;branch=master;name=refpolicy;destsuffix=refpolicy" -SRC_URI += "git://github.com/TresysTechnology/refpolicy-contrib.git;protocol=git;branch=master;name=refpolicy-contrib;destsuffix=refpolicy/policy/modules/contrib" +SRC_URI = "git://github.com/SELinuxProject/refpolicy.git;protocol=git;branch=master;name=refpolicy;destsuffix=refpolicy" -SRCREV_refpolicy ?= "794ed7efd0eca19d0353659a1ec9d4ef4e4b751c" -SRCREV_refpolicy-contrib ?= "a393275a6ecb76311323726a029767a3a01e109e" -SRCREV_FORMAT = "refpolicy.refpolicy-contrib" +SRCREV_refpolicy ?= "df696a325404b84c2c931c85356510005e5e6916" FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-git:" -# Fix file contexts for Poky -SRC_URI += "file://poky-fc-subs_dist.patch \ - file://poky-fc-update-alternatives_sysvinit.patch \ - file://poky-fc-update-alternatives_hostname.patch \ - file://poky-fc-update-alternatives_bash.patch \ - file://poky-fc-fix-real-path_resolv.conf.patch \ - file://poky-fc-fix-real-path_login.patch \ - file://poky-fc-fix-real-path_shadow.patch \ - file://poky-fc-fix-bind.patch \ - file://poky-fc-clock.patch \ - file://poky-fc-dmesg.patch \ - file://poky-fc-fstools.patch \ - file://poky-fc-mta.patch \ - file://poky-fc-screen.patch \ - file://poky-fc-ssh.patch \ - file://poky-fc-sysnetwork.patch \ - file://poky-fc-udevd.patch \ - file://poky-fc-rpm.patch \ - file://poky-fc-fix-real-path_su.patch \ - file://refpolicy-update-for_systemd.patch \ - " - -# Specific policy for Poky -SRC_URI += "file://poky-policy-add-syslogd_t-to-trusted-object.patch \ - file://poky-policy-add-rules-for-var-log-symlink.patch \ - file://poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch \ - file://poky-policy-add-rules-for-syslogd_t-symlink.patch \ - file://poky-policy-add-rules-for-var-cache-symlink.patch \ - file://poky-policy-add-rules-for-tmp-symlink.patch \ - file://poky-policy-add-rules-for-bsdpty_device_t.patch \ - file://poky-policy-don-t-audit-tty_device_t.patch \ - file://poky-policy-allow-nfsd-to-exec-shell-commands.patch \ - file://poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch \ - file://poky-policy-allow-setfiles_t-to-read-symlinks.patch \ - file://poky-policy-fix-new-SELINUXMNT-in-sys.patch \ - file://poky-policy-allow-sysadm-to-run-rpcinfo.patch \ - " - -# Other policy fixes -SRC_URI += " \ - file://poky-policy-fix-seutils-manage-config-files.patch \ - file://poky-policy-fix-setfiles-statvfs-get-file-count.patch \ - file://poky-policy-fix-dmesg-to-use-dev-kmsg.patch \ - file://ftp-add-ftpd_t-to-mlsfilewrite.patch \ - " - include refpolicy_common.inc -- cgit v1.2.3-54-g00ecf