From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 5/5] package/libsepol: set default policy version
Date: Mon, 3 Feb 2020 19:52:07 +0100 [thread overview]
Message-ID: <20200203195207.7edbc44b@windsurf> (raw)
In-Reply-To: <20200203132951.1331252-5-aduskett@gmail.com>
On Mon, 3 Feb 2020 05:29:51 -0800
Adam Duskett <aduskett@gmail.com> wrote:
> config BR2_PACKAGE_LIBSEPOL_POLICY_VERSION
> int "Policy version"
> - default 30
> + default 31 if BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_13
> + default 30 if BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_3
> + default 29 if BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_14
> + default 28 if BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_5
> + default 26 if BR2_TOOLCHAIN_HEADERS_AT_LEAST_2_6
> + default 25
> + help
> + The maximum SELinux policy version your kernel supports.
> +
> + Here's a handy table to help you choose:
> + kernel version SElinux policy max version
> + <= 2.6.x 25
> + > 2.6 <= 3.5 26
> + > 3.5 <= 3.14 28 (27 and 28 were added@the same time)
> + > 3.14 <= 4.3 29
> + > 4.3 <= 4.13 30
> + > 4.13 <= 5.5 31
The <= 5.5 didn't make much sense here. As of now, 31 is the policy
version of anything > 4.13, which includes kernels also above 5.5. We
can update that when version 32 starts to be used.
I've fixed that when applying. Thanks!
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
next prev parent reply other threads:[~2020-02-03 18:52 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-02-03 13:29 [Buildroot] [PATCH 1/5] package/refpolicy: remove dependency on policycoreutils Adam Duskett
2020-02-03 13:29 ` [Buildroot] [PATCH 2/5] package/refpolicy: bump version to 2.20190609 Adam Duskett
2020-02-03 14:59 ` Thomas Petazzoni
2020-02-03 13:29 ` [Buildroot] [PATCH 3/5] Move refpolicy policy version selection to libsepol Adam Duskett
2020-02-03 18:51 ` Thomas Petazzoni
2020-02-03 13:29 ` [Buildroot] [PATCH 4/5] package/libsepol: change policy version to an int Adam Duskett
2020-02-03 18:51 ` Thomas Petazzoni
2020-02-03 13:29 ` [Buildroot] [PATCH 5/5] package/libsepol: set default policy version Adam Duskett
2020-02-03 18:52 ` Thomas Petazzoni [this message]
2020-02-03 14:59 ` [Buildroot] [PATCH 1/5] package/refpolicy: remove dependency on policycoreutils Thomas Petazzoni
2020-02-03 18:46 ` Thomas Petazzoni
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200203195207.7edbc44b@windsurf \
--to=thomas.petazzoni@bootlin.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.