mirror of
git://git.yoctoproject.org/meta-selinux
synced 2026-01-01 13:58:04 +00:00
59 lines
2.8 KiB
HTML
59 lines
2.8 KiB
HTML
PV = "2.20170805+git${SRCPV}"
|
|
|
|
SRC_URI = "git://github.com/TresysTechnology/refpolicy.git;protocol=git;branch=master;name=refpolicy;destsuffix=refpolicy"
|
|
SRC_URI += "git://github.com/TresysTechnology/refpolicy-contrib.git;protocol=git;branch=master;name=refpolicy-contrib;destsuffix=refpolicy/policy/modules/contrib"
|
|
|
|
SRCREV_refpolicy ?= "794ed7efd0eca19d0353659a1ec9d4ef4e4b751c"
|
|
SRCREV_refpolicy-contrib ?= "a393275a6ecb76311323726a029767a3a01e109e"
|
|
SRCREV_FORMAT = "refpolicy.refpolicy-contrib"
|
|
|
|
FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-git:"
|
|
|
|
# Fix file contexts for Poky
|
|
SRC_URI += "file://poky-fc-subs_dist.patch \
|
|
file://poky-fc-update-alternatives_sysvinit.patch \
|
|
file://poky-fc-update-alternatives_hostname.patch \
|
|
file://poky-fc-update-alternatives_bash.patch \
|
|
file://poky-fc-fix-real-path_resolv.conf.patch \
|
|
file://poky-fc-fix-real-path_login.patch \
|
|
file://poky-fc-fix-real-path_shadow.patch \
|
|
file://poky-fc-fix-bind.patch \
|
|
file://poky-fc-clock.patch \
|
|
file://poky-fc-dmesg.patch \
|
|
file://poky-fc-fstools.patch \
|
|
file://poky-fc-mta.patch \
|
|
file://poky-fc-screen.patch \
|
|
file://poky-fc-ssh.patch \
|
|
file://poky-fc-sysnetwork.patch \
|
|
file://poky-fc-udevd.patch \
|
|
file://poky-fc-rpm.patch \
|
|
file://poky-fc-fix-real-path_su.patch \
|
|
file://refpolicy-update-for_systemd.patch \
|
|
"
|
|
|
|
# Specific policy for Poky
|
|
SRC_URI += "file://poky-policy-add-syslogd_t-to-trusted-object.patch \
|
|
file://poky-policy-add-rules-for-var-log-symlink.patch \
|
|
file://poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch \
|
|
file://poky-policy-add-rules-for-syslogd_t-symlink.patch \
|
|
file://poky-policy-add-rules-for-var-cache-symlink.patch \
|
|
file://poky-policy-add-rules-for-tmp-symlink.patch \
|
|
file://poky-policy-add-rules-for-bsdpty_device_t.patch \
|
|
file://poky-policy-don-t-audit-tty_device_t.patch \
|
|
file://poky-policy-allow-nfsd-to-exec-shell-commands.patch \
|
|
file://poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch \
|
|
file://poky-policy-allow-setfiles_t-to-read-symlinks.patch \
|
|
file://poky-policy-fix-new-SELINUXMNT-in-sys.patch \
|
|
file://poky-policy-allow-sysadm-to-run-rpcinfo.patch \
|
|
"
|
|
|
|
# Other policy fixes
|
|
SRC_URI += " \
|
|
file://poky-policy-fix-seutils-manage-config-files.patch \
|
|
file://poky-policy-fix-setfiles-statvfs-get-file-count.patch \
|
|
file://poky-policy-fix-dmesg-to-use-dev-kmsg.patch \
|
|
file://ftp-add-ftpd_t-to-mlsfilewrite.patch \
|
|
"
|
|
|
|
include refpolicy_common.inc
|