linux/meta-selinux.git/recipes-security/packagegroups, branch master

packagegroup-selinux-minimal: add missing runtime dependency selinux-autorelabel

2024-06-26T15:09:53+00:00

Add selinux-autorelabel to reset the SELinux label on the root filesystem at boot time. Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

meta-selinux: convert to new override syntax

2021-08-04T20:18:39+00:00

This is the result of automated script conversion: poky/scripts/contrib/convert-overrides.py meta-selinux Converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

packagegroup-core-selinux: add auditd

2021-03-03T18:55:58+00:00

Install auditd which will help the users debug and eliminate the audit logs on screen. Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

packagegroup-selinux-minimal: add selinux-init

2019-04-14T21:14:54+00:00

When trying to build a minimal image (eg: without python), the default user on autologin is not mapped to the intended user/role/domain: # id -Z system_u:system_r:kernel_t:s0 And the following error is displayed on autologin: Unable to get valid context for While on an image built with the core-selinux packagegroup: # id -Z unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 Adding selinux-init to the minimal package list fixes the issue. This package does not seem to bring along additional dependencies. Signed-off-by: Luca Boccassi Signed-off-by: Joe MacDonald

packagegroup-selinux-policycoreutils: remove semodule-utils-semodule-deps

2018-09-07T20:13:57+00:00

Remove package semodule-utils-semodule-deps as it had been removed upstream. Signed-off-by: Yi Zhao Signed-off-by: Joe MacDonald

packagegroups: Fix LIC_FILES_CHKSUM

2017-09-14T21:12:25+00:00

Resolve warning: ${COREBASE}/LICENSE is not a valid license file, please use '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM. Also remove the obsolete PR number. Signed-off-by: Mark Hatle

packagegroup-*: sync package names

2017-09-14T13:29:01+00:00

Some new packages added after SELinux uprev to 2.7, sync the package names accordingly: policycoreutils-audit2allow -> selinux-python-audit2allow policycoreutils-chcat -> selinux-python-chcat policycoreutils-python -> selinux-python policycoreutils-semanage -> selinux-python-semanage policycoreutils-sandbox -> selinux-sandbox policycoreutils-sepolgen-ifgen -> selinux-python-sepolgen-ifgen policycoreutils-sepolicy -> selinux-python-sepolicy, selinux-dbus policycoreutils-semodule-deps -> semodule-utils-semodule-deps policycoreutils-semodule-expand -> semodule-utils-semodule-expand policycoreutils-semodule-link -> semodule-utils-semodule-link policycoreutils-semodule-package -> semodule-utils-semodule-package system-config-selinux -> selinux-gui sepolgen -> selinux-python-sepolgen Signed-off-by: Wenzong Fan Signed-off-by: Mark Hatle

removed ustr as a required RDEPEND

2017-05-02T13:21:35+00:00

Signed-off-by: Doug Goldstein Signed-off-by: Joe MacDonald

refpolicy: remove virtual prefix for runtime providers

2016-07-07T14:38:32+00:00

In keeping with the approach of only providing a single default policy at runtime, we were originally using a virtual/refpolicy dependency and filling it with one of our specific refpolicy implementations. This works well enough for some package systems, but fails for others (specifically deb, possibly more). Since the intent was to only have one present in the default image anyway, we'll just throw out the 'virtual/' part of the RPROVIDES and related dependencies across the board. Signed-off-by: Joe MacDonald

packagegroup-selinux-policycoreutils: add policycoreutils-hll

2016-06-16T14:33:18+00:00

we need policycoreutils-hll to insert custom policy module/package, without it semodule install fail with error: libsemanage.semanage_pipe_data: Unable to execute /usr/libexec/selinux/hll/ pp : No such file or directory libsemanage.semanage_direct_commit: Failed to compile hll files into cil files. (No such file or directory). semodule: Failed! Signed-off-by: Shrikant Bobade Signed-off-by: Joe MacDonald