* [Buildroot] [PATCH 1/9] package/libselinux: set the config_lsm kernel config option to selinux
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 2/9] package/libselinux: enable kernel selinux support for erofs images aduskett at gmail.com
` (8 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
Currently, the libselinux package sets the CONFIG_DEFAULT_SECURITY_SELINUX
kernel option. However, as of kernels >= 5.1, this option is superseded in
favor of the CONFIG_LSM option, a comma-separated list of LSMs the kernel
should initialize in order.
As the previous behavior of this package sets the kernel's default and only
LSM to initialize to SELinux, it is safe to set this string to just selinux.
If the user wants additional LSM's, they may do so with a custom kernel config.
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 1 +
1 file changed, 1 insertion(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index f7397141d5..521dbaaba8 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -111,6 +111,7 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY)
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK)
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX)
+ $(call KCONFIG_SET_OPT,CONFIG_LSM,"selinux")
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 2/9] package/libselinux: enable kernel selinux support for erofs images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 1/9] package/libselinux: set the config_lsm kernel config option to selinux aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 3/9] package/libselinux: enable kernel selinux support for ext2 images aduskett at gmail.com
` (7 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_EROFS is selected, enable the following kernel options:
- CONFIG_EROFS_FS_XATTR
- CONFIG_EROFS_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 3 +++
1 file changed, 3 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index 521dbaaba8..b8f9c3b55a 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -112,6 +112,9 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_NETWORK)
$(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_SELINUX)
$(call KCONFIG_SET_OPT,CONFIG_LSM,"selinux")
+ $(if $(BR2_TARGET_ROOTFS_EROFS),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_XATTR)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 3/9] package/libselinux: enable kernel selinux support for ext2 images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 1/9] package/libselinux: set the config_lsm kernel config option to selinux aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 2/9] package/libselinux: enable kernel selinux support for erofs images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 4/9] package/libselinux: enable kernel selinux support for ext3 images aduskett at gmail.com
` (6 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_EXT2 is selected, enable the following kernel options:
- CONFIG_EXT2_FS_XATTR
- CONFIG_EXT2_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 3 +++
1 file changed, 3 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index b8f9c3b55a..77efe2d8e0 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -115,6 +115,9 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(if $(BR2_TARGET_ROOTFS_EROFS),
$(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_XATTR)
$(call KCONFIG_ENABLE_OPT,CONFIG_EROFS_FS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_EXT2),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_XATTR)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 4/9] package/libselinux: enable kernel selinux support for ext3 images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (2 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 3/9] package/libselinux: enable kernel selinux support for ext2 images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 5/9] package/libselinux: enable kernel selinux support for ext4 images aduskett at gmail.com
` (5 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_EXT2_3 is selected, enable the following kernel options:
- CONFIG_EXT3_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 2 ++
1 file changed, 2 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index 77efe2d8e0..525f4fe9a2 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -118,6 +118,8 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(if $(BR2_TARGET_ROOTFS_EXT2),
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_XATTR)
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_EXT2_3),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 5/9] package/libselinux: enable kernel selinux support for ext4 images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (3 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 4/9] package/libselinux: enable kernel selinux support for ext3 images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 6/9] package/libselinux: enable kernel selinux support for f2fs images aduskett at gmail.com
` (4 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_EXT2_4 is selected, enable the following kernel options:
- CONFIG_EXT4_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 2 ++
1 file changed, 2 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index 525f4fe9a2..44d9ec3657 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -120,6 +120,8 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT2_FS_SECURITY))
$(if $(BR2_TARGET_ROOTFS_EXT2_3),
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_EXT2_4),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_EXT4_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 6/9] package/libselinux: enable kernel selinux support for f2fs images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (4 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 5/9] package/libselinux: enable kernel selinux support for ext4 images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 7/9] package/libselinux: enable kernel selinux support for jffs2 images aduskett at gmail.com
` (3 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_F2FS is selected, enable the following kernel options:
- CONFIG_F2FS_FS_XATTR
- CONFIG_F2FS_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 3 +++
1 file changed, 3 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index 44d9ec3657..c16dcdf1d0 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -122,6 +122,9 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT3_FS_SECURITY))
$(if $(BR2_TARGET_ROOTFS_EXT2_4),
$(call KCONFIG_ENABLE_OPT,CONFIG_EXT4_FS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_F2FS),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_XATTR)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 7/9] package/libselinux: enable kernel selinux support for jffs2 images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (5 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 6/9] package/libselinux: enable kernel selinux support for f2fs images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:40 ` [Buildroot] [PATCH 8/9] package/libselinux: enable kernel selinux support for squashfs images aduskett at gmail.com
` (2 subsequent siblings)
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_JFFS2 is selected, enable the following kernel options:
- CONFIG_JFS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 2 ++
1 file changed, 2 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index c16dcdf1d0..3dee922214 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -125,6 +125,8 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(if $(BR2_TARGET_ROOTFS_F2FS),
$(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_XATTR)
$(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_JFFS2),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 8/9] package/libselinux: enable kernel selinux support for squashfs images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (6 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 7/9] package/libselinux: enable kernel selinux support for jffs2 images aduskett at gmail.com
@ 2020-07-31 20:40 ` aduskett at gmail.com
2020-07-31 20:41 ` [Buildroot] [PATCH 9/9] package/libselinux: enable kernel selinux support for ubifs images aduskett at gmail.com
2020-09-04 13:48 ` [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups Thomas Petazzoni
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:40 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_SQUASHFS is selected, enable the following kernel options:
- CONFIG_SQUASHFS_XATTR
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 2 ++
1 file changed, 2 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index 3dee922214..f2c2922122 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -127,6 +127,8 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_F2FS_FS_SECURITY))
$(if $(BR2_TARGET_ROOTFS_JFFS2),
$(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
+ $(if $(BR2_TARGET_ROOTFS_SQUASHFS),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SQUASHFS_XATTR))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 9/9] package/libselinux: enable kernel selinux support for ubifs images
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (7 preceding siblings ...)
2020-07-31 20:40 ` [Buildroot] [PATCH 8/9] package/libselinux: enable kernel selinux support for squashfs images aduskett at gmail.com
@ 2020-07-31 20:41 ` aduskett at gmail.com
2020-09-04 13:48 ` [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups Thomas Petazzoni
9 siblings, 0 replies; 11+ messages in thread
From: aduskett at gmail.com @ 2020-07-31 20:41 UTC (permalink / raw)
To: buildroot
From: Adam Duskett <Aduskett@gmail.com>
If BR2_TARGET_ROOTFS_UBIFS is selected, enable the following kernel options:
- CONFIG_UBIFS_FS_XATTR
- CONFIG_UBIFS_FS_SECURITY
Signed-off-by: Adam Duskett <Aduskett@gmail.com>
---
package/libselinux/libselinux.mk | 3 +++
1 file changed, 3 insertions(+)
diff --git a/package/libselinux/libselinux.mk b/package/libselinux/libselinux.mk
index f2c2922122..c96b5a4431 100644
--- a/package/libselinux/libselinux.mk
+++ b/package/libselinux/libselinux.mk
@@ -129,6 +129,9 @@ define LIBSELINUX_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_JFS_SECURITY))
$(if $(BR2_TARGET_ROOTFS_SQUASHFS),
$(call KCONFIG_ENABLE_OPT,CONFIG_SQUASHFS_XATTR))
+ $(if $(BR2_TARGET_ROOTFS_UBIFS),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_XATTR)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_UBIFS_FS_SECURITY))
endef
$(eval $(generic-package))
--
2.26.2
^ permalink raw reply related [flat|nested] 11+ messages in thread* [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups
2020-07-31 20:40 [Buildroot] [PATCH 0/9] package/libselinux: kernel munging fixups aduskett at gmail.com
` (8 preceding siblings ...)
2020-07-31 20:41 ` [Buildroot] [PATCH 9/9] package/libselinux: enable kernel selinux support for ubifs images aduskett at gmail.com
@ 2020-09-04 13:48 ` Thomas Petazzoni
9 siblings, 0 replies; 11+ messages in thread
From: Thomas Petazzoni @ 2020-09-04 13:48 UTC (permalink / raw)
To: buildroot
Hello,
On Fri, 31 Jul 2020 13:40:51 -0700
aduskett at gmail.com wrote:
> Adam Duskett (9):
> package/libselinux: set the config_lsm kernel config option to selinux
> package/libselinux: enable kernel selinux support for erofs images
> package/libselinux: enable kernel selinux support for ext2 images
> package/libselinux: enable kernel selinux support for ext3 images
> package/libselinux: enable kernel selinux support for ext4 images
> package/libselinux: enable kernel selinux support for f2fs images
> package/libselinux: enable kernel selinux support for jffs2 images
> package/libselinux: enable kernel selinux support for squashfs images
> package/libselinux: enable kernel selinux support for ubifs images
I don't see those patches anymore in patchwork, I'm not sure why. Did
you change their status?
Anyway, I've applied the entire series. Thanks!
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 11+ messages in thread