[meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

[meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

[Philip Tricca]

Currently logins to core-image-selinux images through a getty (serial)
fail. This is caused by the use of the busybox getty. SELinux depends
on executable files and their labels to transition between types.
The symlink to busybox is not sufficient to cause the getty processes
to transition to the right SELinux context. Using a getty binary
like the one provided by util-linux fixes this.

Signed-off-by: Philip Tricca <flihp@twobit.us>
---
 recipes-security/images/core-image-selinux.bb |    1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes-security/images/core-image-selinux.bb b/recipes-security/images/core-image-selinux.bb
index 0109933..1ec7b08 100644
--- a/recipes-security/images/core-image-selinux.bb
+++ b/recipes-security/images/core-image-selinux.bb
@@ -6,6 +6,7 @@ LICENSE = "MIT"
 
 IMAGE_INSTALL = "\
 	${CORE_IMAGE_BASE_INSTALL} \
+	util-linux-agetty \
 	packagegroup-core-basic \
 	packagegroup-core-selinux \
 "   
-- 
1.7.10.4

Re: [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

[Joe MacDonald]

[-- Attachment #1: Type: text/plain, Size: 1295 bytes --]

All opposed?  If the motion is carried, I'll merge it both into master
and what will soon become master-next.

-J.

[[yocto] [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.] On 13.09.26 (Thu 04:58) Philip Tricca wrote:

> Currently logins to core-image-selinux images through a getty (serial)
> fail. This is caused by the use of the busybox getty. SELinux depends
> on executable files and their labels to transition between types.
> The symlink to busybox is not sufficient to cause the getty processes
> to transition to the right SELinux context. Using a getty binary
> like the one provided by util-linux fixes this.
> 
> Signed-off-by: Philip Tricca <flihp@twobit.us>
> ---
>  recipes-security/images/core-image-selinux.bb |    1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/recipes-security/images/core-image-selinux.bb b/recipes-security/images/core-image-selinux.bb
> index 0109933..1ec7b08 100644
> --- a/recipes-security/images/core-image-selinux.bb
> +++ b/recipes-security/images/core-image-selinux.bb
> @@ -6,6 +6,7 @@ LICENSE = "MIT"
>  
>  IMAGE_INSTALL = "\
>  	${CORE_IMAGE_BASE_INSTALL} \
> +	util-linux-agetty \
>  	packagegroup-core-basic \
>  	packagegroup-core-selinux \
>  "   
-- 
-Joe MacDonald.
:wq

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]

Re: [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

[Joe MacDonald]

[-- Attachment #1: Type: text/plain, Size: 1198 bytes --]

Merged, thanks.
-J.

[[yocto] [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.] On 13.09.26 (Thu 04:58) Philip Tricca wrote:

> Currently logins to core-image-selinux images through a getty (serial)
> fail. This is caused by the use of the busybox getty. SELinux depends
> on executable files and their labels to transition between types.
> The symlink to busybox is not sufficient to cause the getty processes
> to transition to the right SELinux context. Using a getty binary
> like the one provided by util-linux fixes this.
> 
> Signed-off-by: Philip Tricca <flihp@twobit.us>
> ---
>  recipes-security/images/core-image-selinux.bb |    1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/recipes-security/images/core-image-selinux.bb b/recipes-security/images/core-image-selinux.bb
> index 0109933..1ec7b08 100644
> --- a/recipes-security/images/core-image-selinux.bb
> +++ b/recipes-security/images/core-image-selinux.bb
> @@ -6,6 +6,7 @@ LICENSE = "MIT"
>  
>  IMAGE_INSTALL = "\
>  	${CORE_IMAGE_BASE_INSTALL} \
> +	util-linux-agetty \
>  	packagegroup-core-basic \
>  	packagegroup-core-selinux \
>  "   
-- 
-Joe MacDonald.
:wq

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]