summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMark Hatle <mark.hatle@windriver.com>2017-09-08 10:29:55 -0500
committerMark Hatle <mark.hatle@windriver.com>2017-09-14 08:29:01 -0500
commit694b8d1f1a590083e4445d6941f24b412ec0f206 (patch)
tree3e8db887621892ddad7117bc293e5a8db34f821c
parent8bd72dfb5aafe68b82e10d204d3f824a3b5de7af (diff)
downloadmeta-selinux-694b8d1f1a590083e4445d6941f24b412ec0f206.tar.gz
README: Update and remove references to distros, replace w/ DISTRO_FEATURES
Remove distros, instead of specifying an oe or poky example distribution, we are moving to enabling the components using DISTRO_FEATURES. This will make it easier for a user to enable selinux on a custom distribution, or on a project specific basis. Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
-rw-r--r--README61
-rw-r--r--conf/distro/oe-selinux.conf5
-rw-r--r--conf/distro/poky-selinux.conf4
3 files changed, 17 insertions, 53 deletions
diff --git a/README b/README
index dabaa41..f4fadce 100644
--- a/README
+++ b/README
@@ -1,10 +1,10 @@
1meta-selinux 1meta-selinux
2============ 2============
3 3
4This layer's purpose is enabling SE Linux support when used with Poky. 4This layer's purpose is enabling SE Linux support.
5 5
6The majority of this layers work is accomplished in bbappend files, used to 6The majority of this layers work is accomplished in bbappend files, used to
7enable SE Linux support in existing Poky packages. 7enable SE Linux support in existing recipes.
8 8
9A new recipes-security was added. The purpose of this category is to add 9A new recipes-security was added. The purpose of this category is to add
10software specific to system security. 10software specific to system security.
@@ -12,27 +12,11 @@ software specific to system security.
12Please see the MAINTAINERS file for information on contacting the maintainers 12Please see the MAINTAINERS file for information on contacting the maintainers
13of this layer, as well as instructions for submitting patches. 13of this layer, as well as instructions for submitting patches.
14 14
15status
16------
17Sep 17, 2013 - Updated to match oe-core/poky master for what will be the
18 1.5 release
19 * Misc bug fixes
20 * Update distro config
21 * Uprev various packages
22
23Jan 31, 2012 - Initial version of the layer available. Basic functionality:
24 * new recipes-security -- includes all SE Linux core components
25 * enable kernel configuration of SE Linux components
26 * enable a few basic recipes to be used as examples for others
27
28 15
29Dependencies 16Dependencies
30------------ 17------------
31 18
32This layer depends on the Poky metadata. For more information on Poky see 19This layer depends on the openembedded-core metadata.
33the Yocto Project website:
34
35http://www.yoctoproject.org
36 20
37This layer also optionally depends on the following layers: 21This layer also optionally depends on the following layers:
38 22
@@ -57,25 +41,22 @@ of this layer, as well as instructions for submitting patches.
57Building the meta-selinux layer 41Building the meta-selinux layer
58------------------------------- 42-------------------------------
59In order to add selinux support to the poky build this layer should be added 43In order to add selinux support to the poky build this layer should be added
60to the bblayers.conf file. In addition you should modify your local.conf 44to your projects bblayers.conf file.
61to specify the "poky-selinux" distribution.
62
63
64An "oe-selinux" distribution is also included as a convienence for people
65working with this layer, without the additional Poky meta data. This
66approach may work, but is not generally tested by the maintainers.
67 45
68e.g. DISTRO="poky-selinux" 46By default the selinux components are disabled. This conforms to the
47Yocto Project compatible guideline that indicate that simply including a
48layer should not change the system behavior.
69 49
50In order to use the components in this layer you must add the 'selinux' to the
51DISTRO_FEATURES. In addition to selinux, you should be sure that acl, xattr and
52pam are also present.
53e.g. DISTRO_FEATURES_append = " acl xattr pam selinux"
70 54
71Using different versions of linux-yocto 55You must also specify a preferred provider for the virtual/refpolicy. The
72--------------------------------------- 56included policies with this layer are simply reference policies and will need
73To prepare selinux enabled images using different ver. of linux-yocto, 57to be tailored for your environment.
74we can choose supported versions of linux-yocto, 58* Enable the refpolicy-mls:
75currently supported: v3.14, v3.19, v4.1(by default). 59e.g. PREFERRED_PROVIDER_virtual/refpolicy ?= "refpolicy-mls"
76
77* enable the preferred linux-yocto to local.conf or oe-selinux.conf
78e.g. PREFERRED_VERSION_linux-yocto_qemuarm = "3.19%"
79 60
80 61
81Using different versions of refpolicy 62Using different versions of refpolicy
@@ -89,18 +70,10 @@ By default refpolicy from git builds head commit of master branch, we can update
89SRCREV for refpolicy and refpolicy-contrib as appropriate at refpolicy_git.inc 70SRCREV for refpolicy and refpolicy-contrib as appropriate at refpolicy_git.inc
90to check refpolicy as per required commits. 71to check refpolicy as per required commits.
91 72
92* enable the preferred refpolicy-minimum to local.conf or oe-selinux.conf 73* enable the preferred refpolicy-minimum:
93e.g. PREFERRED_VERSION_refpolicy-minimum = "2.20151208" 74e.g. PREFERRED_VERSION_refpolicy-minimum = "2.20151208"
94 75
95 76
96Using perticular refpolicy policy type
97--------------------------------------
98Provider "virtual/refpolicy" used to set perticular refpolicy type.
99
100* enabled refpolicy-minimum from refpolicy types at config level
101e.g. PREFERRED_PROVIDER_virtual/refpolicy ?= "refpolicy-minimum"
102
103
104Using different init manager 77Using different init manager
105---------------------------- 78----------------------------
106By default selinux enabled images coming up with "sysvinit" as init manager, 79By default selinux enabled images coming up with "sysvinit" as init manager,
diff --git a/conf/distro/oe-selinux.conf b/conf/distro/oe-selinux.conf
deleted file mode 100644
index 0011d45..0000000
--- a/conf/distro/oe-selinux.conf
+++ /dev/null
@@ -1,5 +0,0 @@
1DISTRO = "oe-selinux"
2DISTROOVERRIDES .= ":selinux"
3
4DISTRO_FEATURES_append = " acl xattr pam selinux"
5PREFERRED_PROVIDER_virtual/refpolicy ?= "refpolicy-mls"
diff --git a/conf/distro/poky-selinux.conf b/conf/distro/poky-selinux.conf
deleted file mode 100644
index fb5dc09..0000000
--- a/conf/distro/poky-selinux.conf
+++ /dev/null
@@ -1,4 +0,0 @@
1require conf/distro/poky.conf
2require conf/distro/oe-selinux.conf
3
4DISTRO = "poky-selinux"