refpolicy: add setrans.conf for mcs/mls policy

From: Wenzong Fan <[email protected]>

Add initial version for setrans.conf:
- setrans-mls.conf: copied from \
policycoreutils/mcstrans/share/examples/default/setrans.conf
- setrans-mcs.conf: copied from radhat policy.

This fixes below issue:

    $ chcat -L
    IOError: No such file or directory: \
      '/etc/selinux/$POLICY_NAME/setrans.conf'

The following changes since commit 0362287928bc0a58b755488ebd74441c28eeeee2:

audit: Fix lack of a default audit.rules (2014-04-07 09:55:49 -0400)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/setrans
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/setrans

Wenzong Fan (1):
refpolicy: add setrans.conf for mcs/mls policy

 recipes-security/refpolicy/files/setrans-mcs.conf |   17 +++++++
 recipes-security/refpolicy/files/setrans-mls.conf |   52 +++++++++++++++++++++
 recipes-security/refpolicy/refpolicy_common.inc   |    8 ++++
 3 files changed, 77 insertions(+)
 create mode 100644 recipes-security/refpolicy/files/setrans-mcs.conf
 create mode 100644 recipes-security/refpolicy/files/setrans-mls.conf

1.7.9.5

From: Wenzong Fan <[email protected]>

Add initial version for setrans.conf:
- setrans-mls.conf: copied from \
policycoreutils/mcstrans/share/examples/default/setrans.conf
- setrans-mcs.conf: copied from radhat policy.

This fixes below issue:

  $ chcat -L
  IOError: No such file or directory: \
    '/etc/selinux/$POLICY_NAME/setrans.conf'

---
 recipes-security/refpolicy/files/setrans-mcs.conf |   17 +++++++
 recipes-security/refpolicy/files/setrans-mls.conf |   52 +++++++++++++++++++++
 recipes-security/refpolicy/refpolicy_common.inc   |    8 ++++
 3 files changed, 77 insertions(+)
 create mode 100644 recipes-security/refpolicy/files/setrans-mcs.conf
 create mode 100644 recipes-security/refpolicy/files/setrans-mls.conf

new file mode 100644
index 0000000..0ac9c90
@@ -0,0 +1,17 @@
+#
+# Multi-Category Security translation table for SELinux
+# 
+#
+# Objects can be categorized with 0-1023 categories defined by the admin.
+# Objects can be in more than one category at a time.
+# Categories are stored in the system as c0-c1023.  Users can use this
+# table to translate the categories into a more meaningful output.
+# Examples:
+# s0:c0=CompanyConfidential
+# s0:c1=PatientRecord
+# s0:c2=Unclassified
+# s0:c3=TopSecret
+# s0:c1,c3=CompanyConfidentialRedHat
+s0=SystemLow
+s0-s0:c0.c1023=SystemLow-SystemHigh
+s0:c0.c1023=SystemHigh

index fbf9441..76c3efb 100644
@@ -7,6 +7,8 @@ LIC_FILES_CHKSUM = "file://${S}/COPYING;md5=393a5ca445f6965873eca0259a17f833"
 
 # Specific config files for Poky
 SRC_URI += "file://customizable_types \
+            file://setrans-mls.conf \
+            file://setrans-mcs.conf \
 	   "
 
 S = "${WORKDIR}/refpolicy"

@@ -109,6 +111,12 @@ EOF
 	cat ${WORKDIR}/customizable_types >> \
 		${D}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types
 
+	# install setrans.conf for mls/mcs policy
+	if [ -f ${WORKDIR}/setrans-${POLICY_TYPE}.conf ]; then
+		install -m 0644 ${WORKDIR}/setrans-${POLICY_TYPE}.conf \
+			${D}${sysconfdir}/selinux/${POLICY_NAME}/setrans.conf
+	fi
+
 	# install policy headers
 	oe_runmake install-headers DESTDIR=${D}
 

1.7.9.5

Merged, thanks.
-J.

-Joe MacDonald.
:wq