[Buildroot] [PATCH 1/1] systemd: enable selinux if libselinux is selected.

[Buildroot] [PATCH 1/1] systemd: enable selinux if libselinux is selected.

[Adam Duskett]

systemd currently has selinux disabled statically.  This prevents
/sys/fs/selinux from being mounted automatically at boot which
causes audit to no longer function.  This patch fixes the problem
by checking to see if libselinux is selected and enabling support for
selinux if so.

Signed-off-by: Adam Duskett <Adamduskett@outlook.com>
---
 package/systemd/systemd.mk | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/package/systemd/systemd.mk b/package/systemd/systemd.mk
index fa07bd0..ca1f49e 100644
--- a/package/systemd/systemd.mk
+++ b/package/systemd/systemd.mk
@@ -30,7 +30,6 @@ SYSTEMD_CONF_OPTS += \
 	--enable-blkid \
 	--enable-static=no \
 	--disable-manpages \
-	--disable-selinux \
 	--disable-pam \
 	--disable-ima \
 	--disable-libcryptsetup \
@@ -153,6 +152,12 @@ else
 SYSTEMD_CONF_OPTS += --disable-microhttpd --disable-qrencode
 endif
 
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+SYSTEMD_CONF_OPTS += --enable-selinux
+else
+SYSTEMD_CONF_OPTS += --disable-selinux
+endif
+
 ifeq ($(BR2_PACKAGE_SYSTEMD_HWDB),y)
 SYSTEMD_CONF_OPTS += --enable-hwdb
 else
-- 
2.9.3

[Buildroot] [PATCH 1/1] systemd: enable selinux if libselinux is selected.

[Thomas Petazzoni]

Hello,

On Thu, 15 Dec 2016 21:23:12 +0000, Adam Duskett wrote:

> diff --git a/package/systemd/systemd.mk b/package/systemd/systemd.mk
> index fa07bd0..ca1f49e 100644
> --- a/package/systemd/systemd.mk
> +++ b/package/systemd/systemd.mk
> @@ -30,7 +30,6 @@ SYSTEMD_CONF_OPTS += \
>  	--enable-blkid \
>  	--enable-static=no \
>  	--disable-manpages \
> -	--disable-selinux \
>  	--disable-pam \
>  	--disable-ima \
>  	--disable-libcryptsetup \
> @@ -153,6 +152,12 @@ else
>  SYSTEMD_CONF_OPTS += --disable-microhttpd --disable-qrencode
>  endif
>  
> +ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
> +SYSTEMD_CONF_OPTS += --enable-selinux

This lacks:

SYSTEMD_DEPENDENCIES += libselinux

Otherwise you are not guarantee that libselinux will be built before
systemd.

Best regards,

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering
http://free-electrons.com