selinux: set policy-version to 28

PATCH In review [email protected] 2 participants 5 messages Jan 27, 2014 – Jan 28, 2014

lore

Share & tools

lore

[email protected]

author

2014-01-27 06:52 UTC #0 lore raw

cover selinux: set policy-version to 28

From: Wenzong Fan <[email protected]>

The default policy version of new selinux toolchains is 29, to fit kernel 3.10.x, set it to 28.

The following changes since commit 8ce3b9d0d20c79e0d6bba325f6eedbd11febc101:

refpolicy: fix new symlink for policy.kern (2014-01-26 17:44:56 +0800)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/policy-version
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version

Wenzong Fan (1):
selinux: set policy-version to 28

 recipes-security/refpolicy/refpolicy_common.inc |    2 ++
 recipes-security/selinux/libsemanage.inc        |    3 +++
 2 files changed, 5 insertions(+)

Signature · 1 line

1.7.9.5

[email protected]

author

2014-01-27 06:52 UTC #1 lore raw

PATCH 1/1 selinux: set policy-version to 28

From: Wenzong Fan <[email protected]>

The default policy version of new selinux toolchains is 29, to fit kernel 3.10.x, set it to 28.

---
 recipes-security/refpolicy/refpolicy_common.inc |    2 ++
 recipes-security/selinux/libsemanage.inc        |    3 +++
 2 files changed, 5 insertions(+)

recipes-security/refpolicy/refpolicy_common.inc +2 -0

index 6bf7830..fbf9441 100644
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
 path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
 args = \$@
 [end]
+
+policy-version = 28
 EOF
 	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
 	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules

recipes-security/selinux/libsemanage.inc +3 -0

index 5e90c26..799d864 100644
@@ -41,6 +41,9 @@ do_install() {
             DESTDIR=${D} \
             PYLIBVER='python${PYTHON_BASEVERSION}' \
             PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+    # Update "policy-version" for semanage.conf
+    echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
 }
 
 BBCLASSEXTEND = "native"

Signature · 1 line

1.7.9.5

Pascal Ouyang

2014-01-27 08:12 UTC #2 lore raw

Quoted 27 lines · 于 14-1-27 下午2:52, [email protected] 写道:

From: Wenzong Fan <[email protected]>

The default policy version of new selinux toolchains is 29, to fit kernel 3.10.x, set it to 28.

---
  recipes-security/refpolicy/refpolicy_common.inc |    2 ++
  recipes-security/selinux/libsemanage.inc        |    3 +++
  2 files changed, 5 insertions(+)

recipes-security/refpolicy/refpolicy_common.inc +2 -0

index 6bf7830..fbf9441 100644
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
  path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
  args = \$@
  [end]
+
+policy-version = 28
  EOF
  	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
  	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules

recipes-security/selinux/libsemanage.inc +0 -0

index 5e90c26..799d864 100644

recipes-security/selinux/libsemanage.inc do_install() { · line 46

Quoted 6 lines

recipes-security/selinux/libsemanage.inc +3 -0

@@ -41,6 +41,9 @@ do_install() {
              DESTDIR=${D} \
              PYLIBVER='python${PYTHON_BASEVERSION}' \
              PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+    # Update "policy-version" for semanage.conf
+    echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"

please use this instead. Thanks.

sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
	${D}/etc/selinux/semanage.conf

Quoted 4 lines

recipes-security/selinux/libsemanage.inc +0 -0
  }
 
  BBCLASSEXTEND = "native"

Signature · 1 line

- Pascal

wenzong fan

author

2014-01-27 08:44 UTC #3 lore raw

Quoted 37 lines · Pascal Ouyang

Quoted 27 lines · 于 14-1-27 下午2:52, [email protected] 写道:
From: Wenzong Fan <[email protected]>
The default policy version of new selinux toolchains is 29, to fit kernel 3.10.x, set it to 28.
---
   recipes-security/refpolicy/refpolicy_common.inc |    2 ++
   recipes-security/selinux/libsemanage.inc        |    3 +++
   2 files changed, 5 insertions(+)
recipes-security/refpolicy/refpolicy_common.inc +2 -0
index 6bf7830..fbf9441 100644
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
   path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
   args = \$@
   [end]
+
+policy-version = 28
   EOF
   	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
   	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
recipes-security/selinux/libsemanage.inc +0 -0
index 5e90c26..799d864 100644
recipes-security/selinux/libsemanage.inc do_install() { · line 46
Quoted 6 lines
recipes-security/selinux/libsemanage.inc +3 -0
@@ -41,6 +41,9 @@ do_install() {
               DESTDIR=${D} \
               PYLIBVER='python${PYTHON_BASEVERSION}' \
               PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+    # Update "policy-version" for semanage.conf
+    echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
please use this instead. Thanks.

Quoted 6 lines

sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
	${D}/etc/selinux/semanage.conf

Quoted 3 lines

recipes-security/selinux/libsemanage.inc +0 -0
   }
 
   BBCLASSEXTEND = "native"

Branch updated, please help to merge:

http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version

Thanks
Wenzong

Quoted 3 lines

Quoted 1 line

Pascal Ouyang

2014-01-28 07:21 UTC #4 lore raw

Quoted 43 lines · wenzong fan

Quoted 42 lines · Pascal Ouyang
Quoted 27 lines · 于 14-1-27 下午2:52, [email protected] 写道:
From: Wenzong Fan <[email protected]>
The default policy version of new selinux toolchains is 29, to fit kernel 3.10.x, set it to 28.
---
    recipes-security/refpolicy/refpolicy_common.inc |    2 ++
    recipes-security/selinux/libsemanage.inc        |    3 +++
    2 files changed, 5 insertions(+)
recipes-security/refpolicy/refpolicy_common.inc +2 -0
index 6bf7830..fbf9441 100644
@@ -76,6 +76,8 @@ args = -q -c \$@ \$<
    path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
    args = \$@
    [end]
+
+policy-version = 28
    EOF
    	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/policy
    	mkdir -p ${D}${sysconfdir}/selinux/${POLICY_NAME}/modules/active/modules
recipes-security/selinux/libsemanage.inc +0 -0
index 5e90c26..799d864 100644
recipes-security/selinux/libsemanage.inc do_install() { · line 46
Quoted 6 lines
recipes-security/selinux/libsemanage.inc +3 -0
@@ -41,6 +41,9 @@ do_install() {
                DESTDIR=${D} \
                PYLIBVER='python${PYTHON_BASEVERSION}' \
                PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
+
+    # Update "policy-version" for semanage.conf
+    echo "policy-version = 28" >> "${D}/etc/selinux/semanage.conf"
please use this instead. Thanks.
sed -i 's/^#\s*$policy-version\s*=$.*$/\1 28/' \
	${D}/etc/selinux/semanage.conf
Quoted 2 lines
recipes-security/selinux/libsemanage.inc +0 -0
    }
 

Quoted 14 lines

Quoted 1 line
recipes-security/selinux/libsemanage.inc do_install() { · line 49
Quoted 1 line
recipes-security/selinux/libsemanage.inc +0 -0
    BBCLASSEXTEND = "native"
Branch updated, please help to merge:
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/policy-version
Thanks
Wenzong
Quoted 3 lines
Quoted 1 line

Merged. Thanks. :)

- Pascal

Signature · 1 line

- Pascal