* [meta-selinux][PATCH 0/1] selinux: set policy-version to 28
@ 2014-01-27 6:52 wenzong.fan
2014-01-27 6:52 ` [meta-selinux][PATCH 1/1] " wenzong.fan
0 siblings, 1 reply; 5+ messages in thread
From: wenzong.fan @ 2014-01-27 6:52 UTC (permalink / raw)
To: yocto, xin.ouyang, mark.hatle
From: Wenzong Fan <wenzong.fan@windriver.com>
The default policy version of new selinux toolchains is 29, to
fit kernel 3.10.x, set it to 28.
The following changes since commit 8ce3b9d0d20c79e0d6bba325f6eedbd11febc101:
refpolicy: fix new symlink for policy.kern (2014-01-26 17:44:56 +0800)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib wenzong/policy-version
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version
Wenzong Fan (1):
selinux: set policy-version to 28
recipes-security/refpolicy/refpolicy_common.inc | 2 ++
recipes-security/selinux/libsemanage.inc | 3 +++
2 files changed, 5 insertions(+)
--
1.7.9.5
^ permalink raw reply [flat|nested] 5+ messages in thread
* [meta-selinux][PATCH 1/1] selinux: set policy-version to 28
2014-01-27 6:52 [meta-selinux][PATCH 0/1] selinux: set policy-version to 28 wenzong.fan
@ 2014-01-27 6:52 ` wenzong.fan
2014-01-27 8:12 ` Pascal Ouyang
0 siblings, 1 reply; 5+ messages in thread
From: wenzong.fan @ 2014-01-27 6:52 UTC (permalink / raw)
To: yocto, xin.ouyang, mark.hatle
From: Wenzong Fan <wenzong.fan@windriver.com>
The default policy version of new selinux toolchains is 29, to
fit kernel 3.10.x, set it to 28.
---
recipes-security/refpolicy/refpolicy_common.inc | 2 ++
recipes-security/selinux/libsemanage.inc | 3 +++
2 files changed, 5 insertions(+)
diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index 6bf7830..fbf9441 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
args = \$@
[end]
+
+policy-version = 28
EOF
mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
index 5e90c26..799d864 100644
--- a/recipes-security/selinux/libsemanage.inc
+++ b/recipes-security/selinux/libsemanage.inc
@@ -41,6 +41,9 @@ do_install() {
DESTDIR=${D} \
PYLIBVER='python${PYTHON_BASEVERSION}' \
PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+ # Update "policy-version" for semanage.conf
+ echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
}
BBCLASSEXTEND = "native"
--
1.7.9.5
^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [meta-selinux][PATCH 1/1] selinux: set policy-version to 28
2014-01-27 6:52 ` [meta-selinux][PATCH 1/1] " wenzong.fan
@ 2014-01-27 8:12 ` Pascal Ouyang
2014-01-27 8:44 ` wenzong fan
0 siblings, 1 reply; 5+ messages in thread
From: Pascal Ouyang @ 2014-01-27 8:12 UTC (permalink / raw)
To: wenzong.fan, yocto, mark.hatle
于 14-1-27 下午2:52, wenzong.fan@windriver.com 写道:
> From: Wenzong Fan <wenzong.fan@windriver.com>
>
> The default policy version of new selinux toolchains is 29, to
> fit kernel 3.10.x, set it to 28.
> ---
> recipes-security/refpolicy/refpolicy_common.inc | 2 ++
> recipes-security/selinux/libsemanage.inc | 3 +++
> 2 files changed, 5 insertions(+)
>
> diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
> index 6bf7830..fbf9441 100644
> --- a/recipes-security/refpolicy/refpolicy_common.inc
> +++ b/recipes-security/refpolicy/refpolicy_common.inc
> @@ -76,6 +76,8 @@ args = -q -c \$@ \$<
> path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
> args = \$@
> [end]
> +
> +policy-version = 28
> EOF
> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
> diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
> index 5e90c26..799d864 100644
> --- a/recipes-security/selinux/libsemanage.inc
> +++ b/recipes-security/selinux/libsemanage.inc
> @@ -41,6 +41,9 @@ do_install() {
> DESTDIR=${D} \
> PYLIBVER='python${PYTHON_BASEVERSION}' \
> PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
> +
> + # Update "policy-version" for semanage.conf
> + echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
please use this instead. Thanks.
sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
${D}/etc/selinux/semanage.conf
> }
>
> BBCLASSEXTEND = "native"
>
--
- Pascal
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [meta-selinux][PATCH 1/1] selinux: set policy-version to 28
2014-01-27 8:12 ` Pascal Ouyang
@ 2014-01-27 8:44 ` wenzong fan
2014-01-28 7:21 ` Pascal Ouyang
0 siblings, 1 reply; 5+ messages in thread
From: wenzong fan @ 2014-01-27 8:44 UTC (permalink / raw)
To: Pascal Ouyang, yocto, mark.hatle
On 01/27/2014 04:12 PM, Pascal Ouyang wrote:
> 于 14-1-27 下午2:52, wenzong.fan@windriver.com 写道:
>> From: Wenzong Fan <wenzong.fan@windriver.com>
>>
>> The default policy version of new selinux toolchains is 29, to
>> fit kernel 3.10.x, set it to 28.
>> ---
>> recipes-security/refpolicy/refpolicy_common.inc | 2 ++
>> recipes-security/selinux/libsemanage.inc | 3 +++
>> 2 files changed, 5 insertions(+)
>>
>> diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
>> index 6bf7830..fbf9441 100644
>> --- a/recipes-security/refpolicy/refpolicy_common.inc
>> +++ b/recipes-security/refpolicy/refpolicy_common.inc
>> @@ -76,6 +76,8 @@ args = -q -c \$@ \$<
>> path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
>> args = \$@
>> [end]
>> +
>> +policy-version = 28
>> EOF
>> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
>> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
>> diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
>> index 5e90c26..799d864 100644
>> --- a/recipes-security/selinux/libsemanage.inc
>> +++ b/recipes-security/selinux/libsemanage.inc
>> @@ -41,6 +41,9 @@ do_install() {
>> DESTDIR=${D} \
>> PYLIBVER='python${PYTHON_BASEVERSION}' \
>> PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
>> +
>> + # Update "policy-version" for semanage.conf
>> + echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
>
> please use this instead. Thanks.
>
> sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
> ${D}/etc/selinux/semanage.conf
>
>> }
>>
>> BBCLASSEXTEND = "native"
Branch updated, please help to merge:
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version
Thanks
Wenzong
>>
>
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [meta-selinux][PATCH 1/1] selinux: set policy-version to 28
2014-01-27 8:44 ` wenzong fan
@ 2014-01-28 7:21 ` Pascal Ouyang
0 siblings, 0 replies; 5+ messages in thread
From: Pascal Ouyang @ 2014-01-28 7:21 UTC (permalink / raw)
To: wenzong fan, yocto, mark.hatle
于 14-1-27 下午4:44, wenzong fan 写道:
> On 01/27/2014 04:12 PM, Pascal Ouyang wrote:
>> 于 14-1-27 下午2:52, wenzong.fan@windriver.com 写道:
>>> From: Wenzong Fan <wenzong.fan@windriver.com>
>>>
>>> The default policy version of new selinux toolchains is 29, to
>>> fit kernel 3.10.x, set it to 28.
>>> ---
>>> recipes-security/refpolicy/refpolicy_common.inc | 2 ++
>>> recipes-security/selinux/libsemanage.inc | 3 +++
>>> 2 files changed, 5 insertions(+)
>>>
>>> diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
>>> index 6bf7830..fbf9441 100644
>>> --- a/recipes-security/refpolicy/refpolicy_common.inc
>>> +++ b/recipes-security/refpolicy/refpolicy_common.inc
>>> @@ -76,6 +76,8 @@ args = -q -c \$@ \$<
>>> path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
>>> args = \$@
>>> [end]
>>> +
>>> +policy-version = 28
>>> EOF
>>> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
>>> mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
>>> diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
>>> index 5e90c26..799d864 100644
>>> --- a/recipes-security/selinux/libsemanage.inc
>>> +++ b/recipes-security/selinux/libsemanage.inc
>>> @@ -41,6 +41,9 @@ do_install() {
>>> DESTDIR=${D} \
>>> PYLIBVER='python${PYTHON_BASEVERSION}' \
>>> PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
>>> +
>>> + # Update "policy-version" for semanage.conf
>>> + echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
>>
>> please use this instead. Thanks.
>>
>> sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
>> ${D}/etc/selinux/semanage.conf
>>
>>> }
>>>
>>> BBCLASSEXTEND = "native"
>
> Branch updated, please help to merge:
>
> http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version
>
> Thanks
> Wenzong
>
>>>
>>
>>
>
>
Merged. Thanks. :)
- Pascal
--
- Pascal
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2014-01-28 7:21 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-01-27 6:52 [meta-selinux][PATCH 0/1] selinux: set policy-version to 28 wenzong.fan
2014-01-27 6:52 ` [meta-selinux][PATCH 1/1] " wenzong.fan
2014-01-27 8:12 ` Pascal Ouyang
2014-01-27 8:44 ` wenzong fan
2014-01-28 7:21 ` Pascal Ouyang
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.