[Buildroot] [PATCH v2] package/systemd: enable selinux xdg module for refpolicy

[Buildroot] [PATCH v2] package/systemd: enable selinux xdg module for refpolicy

[Romain Naour]

Without the selinux xgd module enabled by systemd package, refpolicy
fail to build due to policy/modules/system/systemd.te [1]

policy/modules/system/systemd.te:288:ERROR 'attribute xdg_config_type is not declared' at token ';' on line 508447:

Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552468
https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552470

[1] https://github.com/SELinuxProject/refpolicy/blob/RELEASE_2_20210908/policy/modules/system/systemd.te#L288

Signed-off-by: Romain Naour <romain.naour@gmail.com>
Cc: Adam Duskett <aduskett@gmail.com>
Cc: Antoine Tenart <atenart@kernel.org>
---
v2: enable xdg module from syslinux instead of refpolicy (Adam, Thomas)
    http://lists.busybox.net/pipermail/buildroot/2021-November/627371.html
---
 package/systemd/systemd.mk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package/systemd/systemd.mk b/package/systemd/systemd.mk
index 8c187d2ec3..a8b11faa5e 100644
--- a/package/systemd/systemd.mk
+++ b/package/systemd/systemd.mk
@@ -20,7 +20,7 @@ SYSTEMD_DEPENDENCIES = \
 	util-linux-libs \
 	$(TARGET_NLS_DEPENDENCIES)
 
-SYSTEMD_SELINUX_MODULES = systemd udev
+SYSTEMD_SELINUX_MODULES = systemd udev xdg
 
 SYSTEMD_PROVIDES = udev
 
-- 
2.31.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v2] package/systemd: enable selinux xdg module for refpolicy

[Yann E. MORIN]

Romain, All,

On 2021-11-05 22:14 +0100, Romain Naour spake thusly:
> Without the selinux xgd module enabled by systemd package, refpolicy
> fail to build due to policy/modules/system/systemd.te [1]
> 
> policy/modules/system/systemd.te:288:ERROR 'attribute xdg_config_type is not declared' at token ';' on line 508447:
> 
> Fixes:
> https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552468
> https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552470
> 
> [1] https://github.com/SELinuxProject/refpolicy/blob/RELEASE_2_20210908/policy/modules/system/systemd.te#L288
> 
> Signed-off-by: Romain Naour <romain.naour@gmail.com>
> Cc: Adam Duskett <aduskett@gmail.com>
> Cc: Antoine Tenart <atenart@kernel.org>

Applied to master, thanks.

Regards,
Yann E. MORIN.

> ---
> v2: enable xdg module from syslinux instead of refpolicy (Adam, Thomas)
>     http://lists.busybox.net/pipermail/buildroot/2021-November/627371.html
> ---
>  package/systemd/systemd.mk | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/package/systemd/systemd.mk b/package/systemd/systemd.mk
> index 8c187d2ec3..a8b11faa5e 100644
> --- a/package/systemd/systemd.mk
> +++ b/package/systemd/systemd.mk
> @@ -20,7 +20,7 @@ SYSTEMD_DEPENDENCIES = \
>  	util-linux-libs \
>  	$(TARGET_NLS_DEPENDENCIES)
>  
> -SYSTEMD_SELINUX_MODULES = systemd udev
> +SYSTEMD_SELINUX_MODULES = systemd udev xdg
>  
>  SYSTEMD_PROVIDES = udev
>  
> -- 
> 2.31.1
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v2] package/systemd: enable selinux xdg module for refpolicy

[Peter Korsgaard]

>>>>> "Romain" == Romain Naour <romain.naour@gmail.com> writes:

 > Without the selinux xgd module enabled by systemd package, refpolicy
 > fail to build due to policy/modules/system/systemd.te [1]

 > policy/modules/system/systemd.te:288:ERROR 'attribute xdg_config_type is not declared' at token ';' on line 508447:

 > Fixes:
 > https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552468
 > https://gitlab.com/buildroot.org/buildroot/-/jobs/1710552470

 > [1] https://github.com/SELinuxProject/refpolicy/blob/RELEASE_2_20210908/policy/modules/system/systemd.te#L288

 > Signed-off-by: Romain Naour <romain.naour@gmail.com>
 > Cc: Adam Duskett <aduskett@gmail.com>
 > Cc: Antoine Tenart <atenart@kernel.org>
 > ---
 > v2: enable xdg module from syslinux instead of refpolicy (Adam, Thomas)
 >     http://lists.busybox.net/pipermail/buildroot/2021-November/627371.html

Committed to 2021.02.x and 2021.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot