summaryrefslogtreecommitdiffstats
path: root/package/refpolicy
Commit message (Collapse)AuthorAgeFilesLines
* refpolicy: bump to 2.20180114Adam Duskett2018-01-223-61/+2
| | | | | | | | Remove 0001-fix-regex-escape-sequence-error.patch, as it has been committed upstream. Signed-off-by: Adam Duskett <aduskett@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* refpolicy: bump to 2.20170805Adam Duskett2017-11-233-10/+73
| | | | | | | | | | | | | | | | In addition to a simple bump, the following extra changes have occured: - Change the refpolicy site to the official release URL. - Remove REFPOLICY_SITE_METHOD and REFPOLICY_GIT_SUBMODULES as the contrib submodule is included in the release tarball. - Refpolicy is now compatible with python3, as such, remove host-python. from the dependencies and add a check for python3 or python in it's place. - Add upstreamed 0001-fix-regex-escape-sequence-error.patch to fix building against python3.6. - Add sha256 license hash to hash file. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Tested-by: Matt Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Globally replace $(HOST_DIR)/usr/bin with $(HOST_DIR)/binArnout Vandecappelle2017-07-051-1/+1
| | | | | | | | | | | Since things are no longer installed in $(HOST_DIR)/usr, the callers should also not refer to it. This is a mechanical change with git grep -l '$(HOST_DIR)/usr/bin' | xargs sed -i 's%$(HOST_DIR)/usr/bin%$(HOST_DIR)/bin%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* refpolicy: add ability to set default state.Adam Duskett2017-06-063-0/+40
| | | | | | | | | | | | | | | | | | | | | | | | | SELinux requires a config file in /etc/selinux which controls the state of SELinux on the system. This config file has two options set in it: SELINUX which set's the state of selinux on boot. SELINUXTYPE which should equal the name of the policy. In this case, the default name is targeted. This patch adds: - A choice menu on Config.in that allows the user to select a default SELinux state. - A basic config file that will be installed to target/etc/selinux and will set SELINUX= to the selected state. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Acked-by: Matt Weber <matthew.weber@rockwellcollins.com> [Thomas: - rename option to BR2_PACKAGE_REFPOLICY_POLICY_STATE - qstrip the variable - drop unused REFPOLICY_NAME variable.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* refpolicy: add ability to specify policy versionAdam Duskett2017-06-062-1/+13
| | | | | | | | | | | | | | | Refpolicy by default will build the highest version supported. This may cause older kernels to not load the policy. This patch adds a custom policy version string which is defaulted to 30, which is the highest supported as of today. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Acked-by: Matt Weber <matthew.weber@rockwellcollins.com> [Thomas: - rename option to BR2_PACKAGE_REFPOLICY_POLICY_VERSION - use qstrip to remove double quotes] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* refpolicy: new packageAdam Duskett2017-06-063-0/+88
The patch is for adding selinux reference policy (refpolicy). It is a complete SELinux policy that can be used as the system policy for a variety of systems and used as the basis for creating other policies. Signed-off-by: Adam Duskett <Adamduskett@outlook.com> Tested-by: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Matt Weber <matthew.weber@rockwellcollins.com> [Thomas: - add entry to DEVELOPERS file - remove redundant dependencies - drop unused REFPOLICY_PYINC option - use SPDX tag for license - minor formatting fixes.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud