Commit Graph

7 Commits

Author SHA1 Message Date
Kai Kang
c8290189fd enable-audit.bbclass: remove implement of packageconfig audit
enable-audit.bbclass is only used by systemd. And systemd has adapted to
use build tool meson and implement PACKAGECONFIG audit in recipe file of
systemd in oe-core.

So remove implement of PACKAGECONFIG audit from enable-audit.bbclass.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-05-08 10:30:56 -04:00
Joe MacDonald
849cd74b5f selinux-image: enable image labelling
selinux images attempt to label the filesystem image at creation time.
This depends on a native setfiles, though, which isn't guaranteed to be
present without the DEPEND addition.

If the 'setfiles' call fails, that shouldn't be fatal, though, it can
always be run at first boot time, as is commonly done with desktop and
server distros.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-02 21:21:44 -04:00
George McCollister
d3efe54085 selinux-image: Fix RE error getting POL_TYPE
Change [:space:] to [[:space:]]. [:space:] is incorrect and is treated
as a list of characters. Prior to this change having a policy of
'standard' resulted in POL_TYPE being set to 'tandard'.

Change the regular expression to match from the beginning of the line
since correcting the [:space:] error causes the '# SELINUXTYPE= can
take one of these values:' line to match.

Signed-off-by: George McCollister <george.mccollister@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-27 09:18:14 -05:00
Philip Tricca
56e952f43a selinux-image: Add new image class to label the rootfs, use it for selinux images.
Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-08-08 16:43:23 -04:00
Joe MacDonald
aa85e81d94 Globally replace 'base_contains' calls with 'bb.utils.contains'
Based on oe-core commit:

   commit 1528e596d4906c33e4be83fcf691cfe76d340ff3
   Author: Otavio Salvador <otavio@ossystems.com.br>
   Date:   Thu Apr 24 15:59:20 2014 -0300

   Globally replace 'base_contains' calls with 'bb.utils.contains'

   The base_contains is kept as a compatibility method and we ought to not
   use it in OE-Core so we can remove it from base metadata in future.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-16 21:05:00 -04:00
Xin Ouyang
098ad74b7c selinux.bbclass: nativesdk- prefix to fit oe-core master.
Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-01-07 10:47:22 +08:00
Xin Ouyang
b493530bff layer: add selinux/audit bbclasses
Add bbclasses only for target packages to enable selinux support,
not native/nativesdk/cross/crosssdk pacakges.

Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
2013-01-05 13:14:00 +08:00