diff options
| -rw-r--r-- | recipes-kernel/linux/linux-yocto/apparmor.cfg | 15 | ||||
| -rw-r--r-- | recipes-kernel/linux/linux-yocto/apparmor_on_boot.cfg | 1 | ||||
| -rw-r--r-- | recipes-kernel/linux/linux-yocto/smack-default-lsm.cfg | 2 | ||||
| -rw-r--r-- | recipes-kernel/linux/linux-yocto/smack.cfg | 8 | ||||
| -rw-r--r-- | recipes-kernel/linux/linux-yocto/yama.cfg | 1 | ||||
| -rw-r--r-- | recipes-kernel/linux/linux-yocto_4.%.bbappend | 13 |
6 files changed, 2 insertions, 38 deletions
diff --git a/recipes-kernel/linux/linux-yocto/apparmor.cfg b/recipes-kernel/linux/linux-yocto/apparmor.cfg deleted file mode 100644 index b5f9bb2..0000000 --- a/recipes-kernel/linux/linux-yocto/apparmor.cfg +++ /dev/null | |||
| @@ -1,15 +0,0 @@ | |||
| 1 | CONFIG_AUDIT=y | ||
| 2 | # CONFIG_NETFILTER_XT_TARGET_AUDIT is not set | ||
| 3 | CONFIG_SECURITY_NETWORK=y | ||
| 4 | # CONFIG_SECURITY_NETWORK_XFRM is not set | ||
| 5 | CONFIG_SECURITY_PATH=y | ||
| 6 | # CONFIG_SECURITY_SELINUX is not set | ||
| 7 | CONFIG_SECURITY_APPARMOR=y | ||
| 8 | CONFIG_SECURITY_APPARMOR_HASH=y | ||
| 9 | CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y | ||
| 10 | # CONFIG_SECURITY_APPARMOR_DEBUG is not set | ||
| 11 | CONFIG_INTEGRITY_AUDIT=y | ||
| 12 | CONFIG_DEFAULT_SECURITY_APPARMOR=y | ||
| 13 | # CONFIG_DEFAULT_SECURITY_DAC is not set | ||
| 14 | CONFIG_DEFAULT_SECURITY="apparmor" | ||
| 15 | CONFIG_AUDIT_GENERIC=y | ||
diff --git a/recipes-kernel/linux/linux-yocto/apparmor_on_boot.cfg b/recipes-kernel/linux/linux-yocto/apparmor_on_boot.cfg deleted file mode 100644 index fc35740..0000000 --- a/recipes-kernel/linux/linux-yocto/apparmor_on_boot.cfg +++ /dev/null | |||
| @@ -1 +0,0 @@ | |||
| 1 | CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 | ||
diff --git a/recipes-kernel/linux/linux-yocto/smack-default-lsm.cfg b/recipes-kernel/linux/linux-yocto/smack-default-lsm.cfg deleted file mode 100644 index b5c4845..0000000 --- a/recipes-kernel/linux/linux-yocto/smack-default-lsm.cfg +++ /dev/null | |||
| @@ -1,2 +0,0 @@ | |||
| 1 | CONFIG_DEFAULT_SECURITY="smack" | ||
| 2 | CONFIG_DEFAULT_SECURITY_SMACK=y | ||
diff --git a/recipes-kernel/linux/linux-yocto/smack.cfg b/recipes-kernel/linux/linux-yocto/smack.cfg deleted file mode 100644 index 62f465a..0000000 --- a/recipes-kernel/linux/linux-yocto/smack.cfg +++ /dev/null | |||
| @@ -1,8 +0,0 @@ | |||
| 1 | CONFIG_IP_NF_SECURITY=m | ||
| 2 | CONFIG_IP6_NF_SECURITY=m | ||
| 3 | CONFIG_EXT2_FS_SECURITY=y | ||
| 4 | CONFIG_EXT3_FS_SECURITY=y | ||
| 5 | CONFIG_EXT4_FS_SECURITY=y | ||
| 6 | CONFIG_SECURITY=y | ||
| 7 | CONFIG_SECURITY_SMACK=y | ||
| 8 | CONFIG_TMPFS_XATTR=y | ||
diff --git a/recipes-kernel/linux/linux-yocto/yama.cfg b/recipes-kernel/linux/linux-yocto/yama.cfg deleted file mode 100644 index 3b55731..0000000 --- a/recipes-kernel/linux/linux-yocto/yama.cfg +++ /dev/null | |||
| @@ -1 +0,0 @@ | |||
| 1 | CONFIG_SECURITY_YAMA=y | ||
diff --git a/recipes-kernel/linux/linux-yocto_4.%.bbappend b/recipes-kernel/linux/linux-yocto_4.%.bbappend index 321392c..39d4e6f 100644 --- a/recipes-kernel/linux/linux-yocto_4.%.bbappend +++ b/recipes-kernel/linux/linux-yocto_4.%.bbappend | |||
| @@ -1,11 +1,2 @@ | |||
| 1 | FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" | 1 | KERNEL_FEATURES_append = " ${@bb.utils.contains("DISTRO_FEATURES", "apparmor", " features/apparmor/apparmor.scc", "" ,d)}" |
| 2 | 2 | KERNEL_FEATURES_append = " ${@bb.utils.contains("DISTRO_FEATURES", "smack", " features/smack/smack.scc", "" ,d)}" | |
| 3 | SRC_URI += "\ | ||
| 4 | ${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor.cfg', '', d)} \ | ||
| 5 | ${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor_on_boot.cfg', '', d)} \ | ||
| 6 | " | ||
| 7 | |||
| 8 | SRC_URI += "\ | ||
| 9 | ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack.cfg', '', d)} \ | ||
| 10 | ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack-default-lsm.cfg', '', d)} \ | ||
| 11 | " | ||
