linux/meta-selinux.git, branch jethro

MAINTAINERS: Update maintainers file

2016-02-22T13:52:20+00:00

Adding Philip Tricca as a common layer maintainer and marking Pascal as away. Signed-off-by: Joe MacDonald

audit: upgrade 2.4.3 -> 2.4.4

2015-11-27T14:18:14+00:00

* rebase patch audit-python-configure.patch * 2.4.4 includes CVE-2015-5186 and bug fixes, detials refer to: http://people.redhat.com/sgrubb/audit/ChangeLog Signed-off-by: Wenzong Fan Signed-off-by: Joe MacDonald

selinux-image: Fix RE error getting POL_TYPE

2015-11-27T14:18:14+00:00

Change [:space:] to [[:space:]]. [:space:] is incorrect and is treated as a list of characters. Prior to this change having a policy of 'standard' resulted in POL_TYPE being set to 'tandard'. Change the regular expression to match from the beginning of the line since correcting the [:space:] error causes the '# SELINUXTYPE= can take one of these values:' line to match. Signed-off-by: George McCollister Signed-off-by: Joe MacDonald

refpolicy-git: Refresh poky-policy-fix-new-SELINUXMNT-in-sys.patch.

2015-11-27T14:18:14+00:00

Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald

selinux-init: Break handling of /.autorelabel out into separate script.

2015-11-27T14:18:14+00:00

Fixup DESCRIPTION in old selinux-init recipe. Exclude this autorelabel script from the minimal packagegroup. Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald

selinux-init: Break labeling of /dev out into separate script.

2015-11-27T14:18:14+00:00

Remove selinux-init package from packagegroup-selinux-minimal. Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald

selinux-init: Move script logic into include.

2015-11-27T14:18:13+00:00

This will be useful when we have other init scripts. Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald

selinux-config: Separate init script into new recipe.

2015-11-27T14:18:13+00:00

Add runtime dependencies for init script. Signed-off-by: Philip Tricca Signed-off-by: Joe MacDonald

refpolicy-minimum: update prepare_policy_store

2015-11-27T14:18:13+00:00

* update prepare_policy_store() for supporting SELinux 2.4 & CIL, the logic is from refpolicy_common.inc but with minimum set of policy modules; * add extra policy modules that required by sysnetwork, without those modules the install process will fail with error: | Failed to resolve roletype statement at 62 of \ .../image/var/lib/selinux/minimum/tmp/modules/100/sysnetwork/cil | Failed to resolve ast | semodule: Failed! Signed-off-by: Wenzong Fan Signed-off-by: Joe MacDonald

refpolicy-targeted: rebase patches

2015-11-27T14:18:13+00:00

rebase patches against latest git sources: * refpolicy-fix-optional-issue-on-sysadm-module.patch * refpolicy-unconfined_u-default-user.patch Signed-off-by: Wenzong Fan Signed-off-by: Joe MacDonald