linux/meta-selinux.git, branch zeus

kernel: Remove non-existing kernel option

2019-10-25T14:12:27+00:00

CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE has been remove from mainline kernel by the commit be6ec88f41ba ("selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUE"). Signed-off-by: He Zhe Signed-off-by: Joe MacDonald

layer.conf: add zeus compatibility

2019-10-18T18:28:13+00:00

Also remove thud and warrior, based on: f5170305dcff (compat: remove thud from warrior layer compatibility list) Since thud or warrior users are expected to use the 'thud' or 'warrior' branch. Signed-off-by: Nicolas Dechesne Signed-off-by: Joe MacDonald

Update MAINTAINERS with new email addr

2019-10-17T14:45:11+00:00

Signed-off-by: Mark Hatle

audit: explicitly disable golang bindings

2019-09-17T14:12:19+00:00

Disable golang bindings to avoid potential host contamination issue. Fixes: https://bugzilla.yoctoproject.org/show_bug.cgi?id=13166 Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

conf/layer.conf: use BBFILES_DYNAMIC for dynamic layers

2019-09-09T16:30:46+00:00

The previous code add all BBFILE_COLLECTIONS/recipes*/*/*.bbappend to BBFILES, which causes the parsing very slow when there are many layers, e.g., I have 87 layers: * Before: $ rm -fr tmp-glibc/ cache; time bitbake -p real 0m45.173s user 0m0.560s sys 0m0.060s * After: $ rm -fr tmp-glibc/ cache; time bitbake -p real 0m25.542s user 0m0.572s sys 0m0.040s It wasted 20s which wasn't worth (The host has 128 threads, it should cost more time on less power host), use BBFILES_DYNAMIC can fix the problem. Signed-off-by: Robert Yang Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

selinux-autorelabel: disable enforcing mode before relabel

2019-09-09T13:56:25+00:00

The commit b0d31db104d9a4e94bc1409c2ffcc1d82f4a780f introduced an issue when first boot with bootparams="selinux=1 enforcing=1". At first boot, all files are unlabeled including /sbin/setfiles. The relabel operations are not permitted under enforcing mode. So we need to disable enforcing mode before relabel. Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

util-linux: drop obsolete patch

2019-08-29T17:52:53+00:00

Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

setools: update SRC_URI

2019-08-29T14:29:56+00:00

SETools has moved from https://github.com/TresysTechnology/setools to https://github.com/SELinuxProject/setools See: https://github.com/TresysTechnology/setools/wiki Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

mcstrans: specify INITDIR

2019-08-29T14:29:56+00:00

By default the mcstrans init script will be installed to /etc/rc.d/init.d directory. Specify INITDIR to install it to /etc/init.d directory. Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

selinux-python: Fix dependency for ntpath

2019-08-28T14:35:12+00:00

On yocto warrior the semanage tool didn't work correctly, because it couldn't find ntpath module. It turned out that this module is now part of the package python-misc, therefore add dependency to python-misc. Signed-off-by: Lorenz Kofler Signed-off-by: Joe MacDonald