* Update to latest git rev. * Drop obsolete and useless patches. * Rebase patches. Signed-off-by: Yi Zhao <yi.zhao@...> --- .../refpolicy/refpolicy-minimum_git.bb | 91 +++--- .../refpolicy/r

Hi Joe, We could make this interface optional by optional_policy. I think it's better than adding dbus to core module. I will send V2. //Yi

This is introduced by commit e1cdd5a94493db1da7d4a815760453a54c45f11c in refpolicy: commit e1cdd5a94493db1da7d4a815760453a54c45f11c Author: Kenton Groombridge <me@...> Date: Sun Oct 2 19:07:08

* Update to latest git rev. * Drop obsolete and useless patches. * Rebase patches. Signed-off-by: Yi Zhao <yi.zhao@...> --- .../refpolicy/refpolicy-minimum_git.bb | 93 +++---- .../refpolicy/

Backport a patch to fix build failure for refpolicy-mls: | Creating mls xserver.pp policy package | libsepol.validate_user_datum: Invalid user datum | libsepol.validate_datum_array_entries: Invalid da

Update SELinux-FAQ as the poky-selinux distro has been removed for a long time. Signed-off-by: Yi Zhao <yi.zhao@...> --- SELinux-FAQ | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-

By default /var/volatile will be mounted with tmpfs_t instead of var_t label, which will cause us to have to add some extra rules to eliminate avc denials of some services. Set rootcontext for /var/vo

Signed-off-by: Yi Zhao <yi.zhao@...> --- meta-cgl-common/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-cgl-common/conf/layer.conf b/meta-cgl-common/c

Fix buildpaths warning: WARNING: resource-agents-4.5.0-r0 do_package_qa: QA Issue: File /lib/systemd/system/ldirectord.service in package ldirectord contains reference to TMPDIR [buildpaths] Signed-of

Signed-off-by: Yi Zhao <yi.zhao@...> --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index d6f83c9..5673b73 100644 ---

Fixes: QA Issue: File /usr/src/debug/setools/4.4.0-r0/setools/policyrep.c in package setools-src contains reference to TMPDIR [buildpaths] Signed-off-by: Yi Zhao <yi.zhao@...> --- recipes-se

Signed-off-by: Yi Zhao <yi.zhao@...> --- .../{semodule-utils_3.3.bb => semodule-utils_3.4.bb} | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) rename recipes-security/selinux

* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by: Yi Zhao <yi.zhao@...> --- ...andle-unsupported-languages-properly.patch | 49 +++++++++++++++++++ .../selinux-sa

Backport a patch to fix chcat runtime error. Signed-off-by: Yi Zhao <yi.zhao@...> --- ...andle-unsupported-languages-properly.patch | 199 ++++++++++++++++++ ...{selinux-gui_3.3.bb => selinux

Signed-off-by: Yi Zhao <yi.zhao@...> --- .../selinux/{selinux-dbus_3.3.bb => selinux-dbus_3.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{selinu

* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by: Yi Zhao <yi.zhao@...> --- ...andle-unsupported-languages-properly.patch | 173 ++++++++++++++++++ .../fix-sepoli

Signed-off-by: Yi Zhao <yi.zhao@...> --- .../selinux/{restorecond_3.3.bb => restorecond_3.4.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename recipes-security/selinux/{re

Refresh patches. Signed-off-by: Yi Zhao <yi.zhao@...> --- .../selinux/mcstrans/mcstrans-de-bashify.patch | 6 +++--- .../mcstrans/mcstrans-fix-the-init-script.patch | 4 ++-- .../selinux/{mcst

Refresh patch. Signed-off-by: Yi Zhao <yi.zhao@...> --- .../policycoreutils-fixfiles-de-bashify.patch | 14 ++-- ...oreutils_3.3.bb => policycoreutils_3.4.bb} | 72 +++++++++---------- 2 files

Use precise license BSD-2-Clause instead of license BSD. Signed-off-by: Yi Zhao <yi.zhao@...> --- recipes-security/selinux/{secilc_3.3.bb => secilc_3.4.bb} | 4 ++-- 1 file changed, 2 inserti