Original refpolicy install compressed policy modules to policy store,
but leave datadir ones uncompressed. After, a "compressed_policy" distro
feature is added for compressing the datadir ones.
This simple mechanism is unworthy for a distro feature, just clear it
and use compressed policy modules by default.
Signed-off-by: Xin Ouyang <xin.ouyang@windriver.com>
There is a small cost to having compressed policy files on the final
image both in terms of memory requirements and load times. In nearly all
circumstances this is negligible, but this adds a DISTRO_FEATURE that
can be used to enable it, if desired.
The default selinux distros will enable the feature by default.
Signed-off-by: Joe MacDonald <joe@deserted.net>
Make the oe-selinux.conf the base configuration file.
Ensure that we enable acl and xattr support as well.
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
bitbake handles immediate expansions of LAYERDIR for us automatically.
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
The lack of leading whitespace was causing two values in the
DISTRO_FEATURES variable to be combined. This was causing 'sysvinit'
from DISTRO_FEATURES_BACKFILL and 'pam' (from oe-selinux) to be
combined into 'sysvinitpam' thus dropping both from the
DISTRO_FEATURES.
Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Joe MacDonald <joe@deserted.net>
