[Buildroot] [PATCH 1/2] package/openssh: enable selinux ssh module for refpolicy

[Buildroot] [PATCH 1/2] package/openssh: enable selinux ssh module for refpolicy

[Adam Duskett]

This is needed for ssh to work with SELinux.

Signed-off-by: Adam Duskett <aduskett@gmail.com>
---
 package/openssh/openssh.mk | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/openssh/openssh.mk b/package/openssh/openssh.mk
index 75c4a0128b..4145bfd8dc 100644
--- a/package/openssh/openssh.mk
+++ b/package/openssh/openssh.mk
@@ -27,6 +27,8 @@ OPENSSH_CONF_OPTS = \
 	--disable-wtmpx \
 	--disable-strip
 
+OPENSSH_SELINUX_MODULES = ssh
+
 define OPENSSH_PERMISSIONS
 	/var/empty d 755 root root - - - - -
 endef
-- 
2.33.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH 2/2] package/coreutils: enable selinux support

[Adam Duskett]

Enable SELinux support if libselinux is selected. This allows utilities such as
ls to read and display extended attributes with ls -lZ

Signed-off-by: Adam Duskett <aduskett@gmail.com>
---
 package/coreutils/coreutils.mk | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/package/coreutils/coreutils.mk b/package/coreutils/coreutils.mk
index 6822c58a32..78bafb635b 100644
--- a/package/coreutils/coreutils.mk
+++ b/package/coreutils/coreutils.mk
@@ -98,6 +98,13 @@ else
 COREUTILS_CONF_OPTS += --disable-libcap
 endif
 
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+COREUTILS_DEPENDENCIES += libselinux
+COREUTILS_CONF_OPTS += --with-selinux
+else
+COREUTILS_CONF_OPTS += --without-selinux
+endif
+
 ifeq ($(BR2_PACKAGE_OPENSSL),y)
 COREUTILS_CONF_OPTS += --with-openssl=yes
 COREUTILS_DEPENDENCIES += openssl
-- 
2.33.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/2] package/openssh: enable selinux ssh module for refpolicy

[Thomas Petazzoni]

On Fri,  3 Dec 2021 10:01:04 -0800
Adam Duskett <aduskett@gmail.com> wrote:

> This is needed for ssh to work with SELinux.
> 
> Signed-off-by: Adam Duskett <aduskett@gmail.com>
> ---
>  package/openssh/openssh.mk | 2 ++
>  1 file changed, 2 insertions(+)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 2/2] package/coreutils: enable selinux support

[Thomas Petazzoni]

On Fri,  3 Dec 2021 10:01:05 -0800
Adam Duskett <aduskett@gmail.com> wrote:

> Enable SELinux support if libselinux is selected. This allows utilities such as
> ls to read and display extended attributes with ls -lZ
> 
> Signed-off-by: Adam Duskett <aduskett@gmail.com>
> ---
>  package/coreutils/coreutils.mk | 7 +++++++
>  1 file changed, 7 insertions(+)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot