* [Buildroot] [PATCH 1/1] linux/linux.mk: add automatic selinux config selection
@ 2020-03-12 18:09 aduskett at gmail.com
2020-03-14 14:37 ` Thomas Petazzoni
0 siblings, 1 reply; 2+ messages in thread
From: aduskett at gmail.com @ 2020-03-12 18:09 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
Enabling SELinux support in the kernel requires several options, many of which
are in different areas. These options are as follows:
- CONFIG_AUDIT
- CONFIG_DEFAULT_SECURITY_SELINUX
- CONFIG_INET
- CONFIG_NET
- CONFIG_SECURITY
- CONFIG_SECURITY_NETWORK
- CONFIG_SECURITY_SELINUX
As such, if a user selects the libselinux package, it is much easier to select
these packages for them, much like we already do with other packages
such as systemd or iptables.
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
linux/linux.mk | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/linux/linux.mk b/linux/linux.mk
index 4b60f33ff3..f8c34c3dca 100644
--- a/linux/linux.mk
+++ b/linux/linux.mk
@@ -406,6 +406,14 @@ define LINUX_KCONFIG_FIXUP_CMDS
$(call KCONFIG_ENABLE_OPT,CONFIG_FB,$(@D)/.config)
$(call KCONFIG_ENABLE_OPT,CONFIG_LOGO,$(@D)/.config)
$(call KCONFIG_ENABLE_OPT,CONFIG_LOGO_LINUX_CLUT224,$(@D)/.config))
+ $(if $(BR2_PACKAGE_LIBSELINUX),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_SELINUX,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_INET,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_NET,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX,$(@D)/.config))
endef
ifeq ($(BR2_LINUX_KERNEL_DTS_SUPPORT),y)
--
2.24.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [Buildroot] [PATCH 1/1] linux/linux.mk: add automatic selinux config selection
2020-03-12 18:09 [Buildroot] [PATCH 1/1] linux/linux.mk: add automatic selinux config selection aduskett at gmail.com
@ 2020-03-14 14:37 ` Thomas Petazzoni
0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni @ 2020-03-14 14:37 UTC (permalink / raw)
To: buildroot
On Thu, 12 Mar 2020 11:09:08 -0700
aduskett at gmail.com wrote:
> From: Adam Duskett <Aduskett@gmail.com>
>
> Enabling SELinux support in the kernel requires several options, many of which
> are in different areas. These options are as follows:
>
> - CONFIG_AUDIT
> - CONFIG_DEFAULT_SECURITY_SELINUX
> - CONFIG_INET
> - CONFIG_NET
> - CONFIG_SECURITY
> - CONFIG_SECURITY_NETWORK
> - CONFIG_SECURITY_SELINUX
>
> As such, if a user selects the libselinux package, it is much easier to select
> these packages for them, much like we already do with other packages
> such as systemd or iptables.
>
> Signed-off-by: Adam Duskett <Aduskett@gmail.com>
> ---
> linux/linux.mk | 8 ++++++++
> 1 file changed, 8 insertions(+)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-03-14 14:37 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-03-12 18:09 [Buildroot] [PATCH 1/1] linux/linux.mk: add automatic selinux config selection aduskett at gmail.com
2020-03-14 14:37 ` Thomas Petazzoni
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox