linux/meta-selinux.git, branch dunfell

refpolicy: update to 20200229+git

2023-07-31T19:05:30+00:00

* Drop obsolete and unused patches. * Rebase patches. * Add patches to make systemd and sysvinit can work with all policy types. Signed-off-by: Yi Zhao (cherry picked from commit 15fed8756aa4828fa12a3d813754b4ca65a7607d) Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald

sysklogd: set correct security context for /var/log in initscript

2023-07-31T19:05:26+00:00

We don't need to set security context for /dev/log after syslogd daemon startup because it is already set by udev. We just need to set the correct security context for symbolic link /var/log before syslogd startup. Signed-off-by: Yi Zhao (cherry picked from commit 7d3b1347ae949c7208482694fd773e4bc3f321b4) Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald

audit: set correct security context for /var/log/audit

2023-07-31T19:05:21+00:00

By default /var/log is a symbolic link of /var/volatile/log. But restorecon does not follow symbolic links then we will encounter the following error when set /var/log/audit directory: $ /sbin/restorecon -F /var/log/audit /sbin/restorecon: SELinux: Could not get canonical path for /var/log/audit restorecon: Permission denied. Use readlink to find the real path before set security context. Signed-off-by: Yi Zhao (cherry picked from commit 8b79480663bc9de2343e0146ed8d3d0e59ab48be) Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald

refpolicy: remove version 2.20190201

2023-07-31T19:05:12+00:00

There is no need to maintain two versions of repolicy. Drop this version and only keep the git version. Signed-off-by: Yi Zhao (cherry picked from commit 9e986d7d794f044464e1af914ddbcd57d8f1c2e9) Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald

audit: Add https protocol for clonning repository

2023-06-26T11:46:49+00:00

audit repository clone failing with git protocol as github.com requires the https protocol to be used Signed-off-by: Shubham Kulkarni Signed-off-by: Joe MacDonald

openssh: don't overwrite sshd_config unconditionally

2022-04-18T16:55:06+00:00

The current implementation was overwriting the sshd_config and sshd assuming PAM is needed by default openssh should use the default sshd_config packaged with the component if no distro specific needs are present and not overwrite the full sshd_config file 1. If PAM is enabled as a distro then enable the UsePAM option in sshd_config 2. Moved the file sshd to pam directory so that when pam is enabled, then replace the default from poky by installing the same Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Joe MacDonald

libselinux: Fix restorecon_set_sehandle.patch context

2021-11-23T17:29:30+00:00

0001-Fix-NULL-pointer-use-in-selinux_restorecon_set_sehandle.patch added in commit d6ff5a0e67af "libselinux: Backport NULL pointer fix from 3.1" fails to apply because there is a extra level in the patch context. The patch cannot apply and do_patch fails. Fix the context so it builds again. Signed-off-by: Jason Andryuk Signed-off-by: Joe MacDonald

Remove e2fsprogs override

2021-11-23T17:29:30+00:00

commit b2b3ea27e3e3 "e2fsprogs: Superseded by upstream." removed lib-ext2fs-ext2_ext_attr.h-add-xattr-index.patch from SRC_URI. It was no longer applied, but the file was not deleted. Do that now. e2fsprogs_%.bbappend/e2fsprogs_selinux.inc now do nothing, so remove them as well. Signed-off-by: Jason Andryuk Signed-off-by: Joe MacDonald

e2fsprogs: Remove misc_create_inode.c-label_rootfs.patch

2021-11-23T17:29:30+00:00

An equivalent patch was merged into 1.45.7: commit 7616fd6a599e "create_inode: set xattrs to the root directory as well". The existing one still applies and actualy breaks building because of duplicate lables. Remove it. Signed-off-by: Jason Andryuk Signed-off-by: Joe MacDonald

MAINTAINERS: update email address

2021-10-18T17:10:17+00:00

Include example send-email (cherry picked from commit 48038b45dc114592991c069eb66d174820c0701d) Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald