* [meta-selinux] Stage SELinux config file in the sysroot.
@ 2013-09-23 3:51 Philip Tricca
2013-09-23 4:25 ` Philip Tricca
2013-09-27 17:55 ` Joe MacDonald
0 siblings, 2 replies; 3+ messages in thread
From: Philip Tricca @ 2013-09-23 3:51 UTC (permalink / raw)
To: yocto
This is needed to build policy modules outside of the refpolicy.
Policy module build systems need to determine the name of the policy
that will be in effect on the target host. This allows them to
locate the policy headers that will be under
$sysroot/usr/share/selinux/$name/include. Given that there *could*
be more than one policy installed in the sysroot we can't assume
that the policy installed there is the only policy to build against.
Signed-off-by: Philip Tricca <flihp@twobit.us>
---
recipes-security/selinux/selinux-config_0.1.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/recipes-security/selinux/selinux-config_0.1.bb b/recipes-security/selinux/selinux-config_0.1.bb
index 9521dcf..ad0d647 100644
--- a/recipes-security/selinux/selinux-config_0.1.bb
+++ b/recipes-security/selinux/selinux-config_0.1.bb
@@ -43,3 +43,6 @@ SELINUXTYPE=${DEFAULT_POLICY}
install -m 0644 ${WORKDIR}/config ${D}/${sysconfdir}/selinux/
}
+sysroot_stage_all_append () {
+ sysroot_stage_dir ${D}${sysconfdir} ${SYSROOT_DESTDIR}${sysconfdir}
+}
--
1.7.10.4
^ permalink raw reply related [flat|nested] 3+ messages in thread* Re: [meta-selinux] Stage SELinux config file in the sysroot.
2013-09-23 3:51 [meta-selinux] Stage SELinux config file in the sysroot Philip Tricca
@ 2013-09-23 4:25 ` Philip Tricca
2013-09-27 17:55 ` Joe MacDonald
1 sibling, 0 replies; 3+ messages in thread
From: Philip Tricca @ 2013-09-23 4:25 UTC (permalink / raw)
To: yocto
Cc'ing Mark.
On 09/22/2013 11:51 PM, Philip Tricca wrote:
> This is needed to build policy modules outside of the refpolicy.
> Policy module build systems need to determine the name of the policy
> that will be in effect on the target host. This allows them to
> locate the policy headers that will be under
> $sysroot/usr/share/selinux/$name/include. Given that there *could*
> be more than one policy installed in the sysroot we can't assume
> that the policy installed there is the only policy to build against.
>
> Signed-off-by: Philip Tricca <flihp@twobit.us>
> ---
> recipes-security/selinux/selinux-config_0.1.bb | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/recipes-security/selinux/selinux-config_0.1.bb b/recipes-security/selinux/selinux-config_0.1.bb
> index 9521dcf..ad0d647 100644
> --- a/recipes-security/selinux/selinux-config_0.1.bb
> +++ b/recipes-security/selinux/selinux-config_0.1.bb
> @@ -43,3 +43,6 @@ SELINUXTYPE=${DEFAULT_POLICY}
> install -m 0644 ${WORKDIR}/config ${D}/${sysconfdir}/selinux/
> }
>
> +sysroot_stage_all_append () {
> + sysroot_stage_dir ${D}${sysconfdir} ${SYSROOT_DESTDIR}${sysconfdir}
> +}
>
^ permalink raw reply [flat|nested] 3+ messages in thread* Re: [meta-selinux] Stage SELinux config file in the sysroot.
2013-09-23 3:51 [meta-selinux] Stage SELinux config file in the sysroot Philip Tricca
2013-09-23 4:25 ` Philip Tricca
@ 2013-09-27 17:55 ` Joe MacDonald
1 sibling, 0 replies; 3+ messages in thread
From: Joe MacDonald @ 2013-09-27 17:55 UTC (permalink / raw)
To: Philip Tricca; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 1292 bytes --]
Merged, thanks.
-J.
[[yocto] [meta-selinux] Stage SELinux config file in the sysroot.] On 13.09.23 (Mon 03:51) Philip Tricca wrote:
> This is needed to build policy modules outside of the refpolicy.
> Policy module build systems need to determine the name of the policy
> that will be in effect on the target host. This allows them to
> locate the policy headers that will be under
> $sysroot/usr/share/selinux/$name/include. Given that there *could*
> be more than one policy installed in the sysroot we can't assume
> that the policy installed there is the only policy to build against.
>
> Signed-off-by: Philip Tricca <flihp@twobit.us>
> ---
> recipes-security/selinux/selinux-config_0.1.bb | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/recipes-security/selinux/selinux-config_0.1.bb b/recipes-security/selinux/selinux-config_0.1.bb
> index 9521dcf..ad0d647 100644
> --- a/recipes-security/selinux/selinux-config_0.1.bb
> +++ b/recipes-security/selinux/selinux-config_0.1.bb
> @@ -43,3 +43,6 @@ SELINUXTYPE=${DEFAULT_POLICY}
> install -m 0644 ${WORKDIR}/config ${D}/${sysconfdir}/selinux/
> }
>
> +sysroot_stage_all_append () {
> + sysroot_stage_dir ${D}${sysconfdir} ${SYSROOT_DESTDIR}${sysconfdir}
> +}
--
-Joe MacDonald.
:wq
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2013-09-27 17:55 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-09-23 3:51 [meta-selinux] Stage SELinux config file in the sysroot Philip Tricca
2013-09-23 4:25 ` Philip Tricca
2013-09-27 17:55 ` Joe MacDonald
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.