From: Philip Tricca <flihp@twobit.us>
To: "yocto@yoctoproject.org" <yocto@yoctoproject.org>
Subject: [meta-selinux][PATCH 0/5] Remove python dependency from refpol.
Date: Wed, 09 Oct 2013 08:23:27 -0400 [thread overview]
Message-ID: <52554ABF.1040308@twobit.us> (raw)
The reference policy package currently pulls in a lot of python stuff
that isn't strictly necessary to boot an SELinux system and load a
policy. AFAIK this is caused by the mix of python and C utilities in
policycoreutils.
This patch set breaks the policycoreutils recipe up into multiple
packages, one for each utility. In this way we can have the refpol etc
pull in only the utilities necessary for normal operation. This happens
to be only the utilities written in C and thus we can remove python
completely in a minimal image.
I've attempted to localize these changes as much as possible so this
patch set should have minimal impact on recipes outside of the
policycoreutils. An example image reicpe is added to demonstrate a
minimal image with only the utilities required to load a policy and
manipulate the policy store (add / remove policy modules) at runtime.
Regards,
- Philip
next reply other threads:[~2013-10-09 12:23 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-10-09 12:23 Philip Tricca [this message]
2013-10-09 12:32 ` [meta-selinux][PATCH 1/5] Break policycoreutils out into separate packages for the various utilities Philip Tricca
2013-10-09 12:37 ` [meta-selinux][PATCH 2/5] Remove unnecessary RDEPENDS_${BPN} Philip Tricca
2013-10-09 12:40 ` [meta-selinux][PATCH 3/5] Remove runtime dependency on policycoreutils from the reference policy Philip Tricca
2013-10-09 12:41 ` [meta-selinux][PATCH 4/5] Add packagegroup and image recipe for minimal SELinux image Philip Tricca
2013-10-09 12:41 ` [meta-selinux][PATCH 5/5] Add packagegroup for policycoreutils packages Philip Tricca
-- strict thread matches above, loose matches on Subject: below --
2013-10-09 3:02 [meta-selinux][PATCH 0/5] Remove python dependency from refpol flihp
2013-10-09 12:23 ` Joe MacDonald
2013-10-09 12:29 ` Philip Tricca
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=52554ABF.1040308@twobit.us \
--to=flihp@twobit.us \
--cc=yocto@yoctoproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.