Skip to content

selinux userspace: uprev packages to release 20131030

[email protected] openembedded-devel yocto 1 version Applied

Status from this message: merged to master-next

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest10 patches 3 repliesApplied

Changes from the cover letter

1) Uprev selinux packages to release 20131030;
2) Fix build dependency to libsemanage;
3) Fix QA issues to policycoreutils;
4) Update LIC_FILES_CHKSUM for selinux packagegroups.

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/10selinux userspace: uprev packages to release 20131030recipes-security/selinux/checkpolicy_2.2.bb recipes-security/selinux/libselinux_2.2.bb recipes-security/selinux/libsemanage_2.2.bb +6 more+13 -150 replies
2/10checkpolicy: migrate SRC_URI to 2.2recipes-security/selinux/checkpolicy_2.2.bb recipes-security/selinux/checkpolicy_git.bb+4 -40 replies
3/10libselinux: migrate SRC_URI and patches to 2.2recipes-security/selinux/libselinux/libselinux-fix-init-load-policy.patch recipes-security/selinux/libselinux/libselinux-pcre-link-order.patch recipes-security/selinux/libselinux_2.2.bb +1 more+10 -660 replies
4/10libsemanage: migrate SRC_URI to 2.2recipes-security/selinux/libsemanage/libsemanage-fix-path-nologin.patch recipes-security/selinux/libsemanage_2.2.bb recipes-security/selinux/libsemanage_git.bb+10 -80 replies
5/10libsepol: migrate SRC_URI to 2.2recipes-security/selinux/libsepol.inc recipes-security/selinux/libsepol/libsepol-Change-ranlib-for-cross-compiling.patch recipes-security/selinux/libsepol_2.2.bb +1 more+8 -400 replies
6/10policycoreutils: migrate SRC_URI and patches to 2.2.5recipes-security/selinux/policycoreutils.inc recipes-security/selinux/policycoreutils/policycoreutils-fix-sepolicy-install-path.patch recipes-security/selinux/policycoreutils/policycoreutils-fix-strict-prototypes.patch +3 more+32 -670 replies
7/10sepolgen: migrate SRC_URI to 1.2.1recipes-security/selinux/sepolgen_1.2.1.bb recipes-security/selinux/sepolgen_git.bb+4 -40 replies
8/10libsemanage: add audit dependencyrecipes-security/audit/audit_2.3.2.bb recipes-security/selinux/libsemanage.inc+8 -20 replies
9/10policycoreutils: fix QA issuesrecipes-security/selinux/policycoreutils.inc+7 -30 replies
10/10selinux packagegroups: update LIC_FILES_CHKSUMrecipes-security/packagegroups/packagegroup-core-selinux.bb recipes-security/packagegroups/packagegroup-selinux-minimal.bb recipes-security/packagegroups/packagegroup-selinux-policycoreutils.bb+3 -30 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [meta-selinux][PATCH 00/10] selinux userspace: uprev packages to release 20131030

From: Wenzong Fan <[email protected]>

Changes:
1) Uprev selinux packages to release 20131030;
2) Fix build dependency to libsemanage;
3) Fix QA issues to policycoreutils;
4) Update LIC_FILES_CHKSUM for selinux packagegroups.

Some Tests:
1) build test:
- add meta-selinux path to conf/bblayers.conf;
- add DISTRO_FEATURES_append=" pam selinux" to conf/local.conf;
- build selinux image:

  $ bitbake core-image-selinux

- add below configs to conf/local.conf and run image build:
PREFERRED_VERSION_checkpolicy = "2.2+gitAUTOINC+edc2e99687" PREFERRED_VERSION_libselinux = "2.2+gitAUTOINC+edc2e99687" PREFERRED_VERSION_libsemanage = "2.2+gitAUTOINC+edc2e99687" PREFERRED_VERSION_libsepol = "2.2+gitAUTOINC+edc2e99687" PREFERRED_VERSION_policycoreutils = "2.2.5+gitAUTOINC+edc2e99687" PREFERRED_VERSION_sepolgen = "1.2.1+gitAUTOINC+edc2e99687"

All builds successfully.

2) basic verification on target:

$ runqemu qemux86 core-image-selinux ext3 nographic qemuparams="-m 1024"

qemux86 login: root

root@qemux86:~# id -Z
root:sysadm_r:sysadm_t:s0-s15:c0.c1023
root@qemux86:~# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             mls
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

The following changes since commit 2209cb5fc21c1ad5a7471897528ed64170f70219:

policy: Create compressed_policy distro feature (2013-12-05 09:03:41 -0500)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/selinux-uprev
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/selinux-uprev

Wenzong Fan (10):
selinux userspace: uprev packages to release 20131030
checkpolicy: migrate SRC_URI to 2.2
libselinux: migrate SRC_URI and patches to 2.2
libsemanage: migrate SRC_URI to 2.2
libsepol: migrate SRC_URI to 2.2
policycoreutils: migrate SRC_URI and patches to 2.2.5
sepolgen: migrate SRC_URI to 1.2.1
libsemanage: add audit dependency
policycoreutils: fix QA issues
selinux packagegroups: update LIC_FILES_CHKSUM

 recipes-security/audit/audit_2.3.2.bb              |    8 ++++-
 .../packagegroups/packagegroup-core-selinux.bb     |    2 +-
 .../packagegroups/packagegroup-selinux-minimal.bb  |    2 +-
 .../packagegroup-selinux-policycoreutils.bb        |    2 +-
 recipes-security/selinux/checkpolicy_2.1.12.bb     |    9 ------
 recipes-security/selinux/checkpolicy_2.2.bb        |    9 ++++++
 recipes-security/selinux/checkpolicy_git.bb        |    2 +-
 .../libselinux-fix-init-load-policy.patch          |   27 ----------------
 .../libselinux/libselinux-pcre-link-order.patch    |   31 ------------------
 .../{libselinux_2.1.13.bb => libselinux_2.2.bb}    |    8 ++---
 recipes-security/selinux/libselinux_git.bb         |   10 ++++--
 recipes-security/selinux/libsemanage.inc           |    2 +-
 .../libsemanage/libsemanage-fix-path-nologin.patch |    9 +++---
 .../{libsemanage_2.1.10.bb => libsemanage_2.2.bb}  |    6 ++--
 recipes-security/selinux/libsemanage_git.bb        |    3 +-
 recipes-security/selinux/libsepol.inc              |    5 ++-
 ...ibsepol-Change-ranlib-for-cross-compiling.patch |   31 ------------------
 recipes-security/selinux/libsepol_2.1.9.bb         |   11 -------
 recipes-security/selinux/libsepol_2.2.bb           |    9 ++++++
 recipes-security/selinux/libsepol_git.bb           |    4 +--
 recipes-security/selinux/policycoreutils.inc       |   12 ++++---
 ...policycoreutils-fix-sepolicy-install-path.patch |   18 +++++------
 .../policycoreutils-fix-strict-prototypes.patch    |   34 --------------------
 .../policycoreutils-make-O_CLOEXEC-optional.patch  |   28 ++++++++--------
 ...oreutils_2.1.14.bb => policycoreutils_2.2.5.bb} |    9 +++---
 recipes-security/selinux/policycoreutils_git.bb    |    8 +++--
 recipes-security/selinux/selinux_20130423.inc      |   12 -------
 recipes-security/selinux/selinux_20131030.inc      |   12 +++++++
 recipes-security/selinux/selinux_git.inc           |    4 +--
 recipes-security/selinux/sepolgen_1.1.9.bb         |    9 ------
 recipes-security/selinux/sepolgen_1.2.1.bb         |    9 ++++++
 recipes-security/selinux/sepolgen_git.bb           |    2 +-
 32 files changed, 117 insertions(+), 230 deletions(-)
 delete mode 100644 recipes-security/selinux/checkpolicy_2.1.12.bb
 create mode 100644 recipes-security/selinux/checkpolicy_2.2.bb
 delete mode 100644 recipes-security/selinux/libselinux/libselinux-fix-init-load-policy.patch
 delete mode 100644 recipes-security/selinux/libselinux/libselinux-pcre-link-order.patch
 rename recipes-security/selinux/{libselinux_2.1.13.bb => libselinux_2.2.bb} (58%)
 rename recipes-security/selinux/{libsemanage_2.1.10.bb => libsemanage_2.2.bb} (70%)
 delete mode 100644 recipes-security/selinux/libsepol/libsepol-Change-ranlib-for-cross-compiling.patch
 delete mode 100644 recipes-security/selinux/libsepol_2.1.9.bb
 create mode 100644 recipes-security/selinux/libsepol_2.2.bb
 delete mode 100644 recipes-security/selinux/policycoreutils/policycoreutils-fix-strict-prototypes.patch
 rename recipes-security/selinux/{policycoreutils_2.1.14.bb => policycoreutils_2.2.5.bb} (55%)
 delete mode 100644 recipes-security/selinux/selinux_20130423.inc
 create mode 100644 recipes-security/selinux/selinux_20131030.inc
 delete mode 100644 recipes-security/selinux/sepolgen_1.1.9.bb
 create mode 100644 recipes-security/selinux/sepolgen_1.2.1.bb
Signature · 1 line
1.7.9.5