Skip to content

add targeted/minimum policy and some updates

[email protected] yocto 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest4 patches 6 repliesIn review

Changes from the cover letter

* backport tmpfs_t patch from upstream;
* add rules for /var/log symlink on poky;
* add targeted policy type
* add minimum targeted policy

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/4refpolicy: associate tmpfs_t (shm) to device_t (devtmpfs) file systemsrecipes-security/refpolicy/refpolicy-2.20130424/filesystem-associate-tmpfs_t-shm-to-device_t-devtmpf.patch recipes-security/refpolicy/refpolicy_2.20130424.inc+31 -00 replies
2/4refpolicy: add rules for /var/log symlink on pokyrecipes-security/refpolicy/refpolicy-2.20130424/poky-policy-add-rules-for-syslogd_t-symlink.patch recipes-security/refpolicy/refpolicy-2.20130424/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch recipes-security/refpolicy/refpolicy_2.20130424.inc+61 -00 replies
3/4refpolicy: add targeted policy typerecipes-security/refpolicy/refpolicy-targeted/refpolicy-fix-optional-issue-on-sysadm-module.patch recipes-security/refpolicy/refpolicy-targeted/refpolicy-unconfined_u-default-user.patch recipes-security/refpolicy/refpolicy-targeted_2.20130424.bb+276 -00 replies
4/4refpolicy: add minimum targeted policyrecipes-security/refpolicy/refpolicy-minimum_2.20130424.bb+46 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [meta-selinux][PATCH 0/4] add targeted/minimum policy and some updates

From: Wenzong Fan <[email protected]>

Changes:
* backport tmpfs_t patch from upstream;
* add rules for /var/log symlink on poky;
* add targeted policy type
* add minimum targeted policy

The following changes since commit a6079a43719e79e12a57e609923a0cccdba06916:

refpolicy: fix real path for su.shadow (2014-02-13 10:52:07 -0500)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/ref-minimum
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/ref-minimum

Wenzong Fan (4):
refpolicy: associate tmpfs_t (shm) to device_t (devtmpfs) file
systems
refpolicy: add rules for /var/log symlink on poky
refpolicy: add targeted policy type
refpolicy: add minimum targeted policy

 ...associate-tmpfs_t-shm-to-device_t-devtmpf.patch |   30 +++
 ...ky-policy-add-rules-for-syslogd_t-symlink.patch |   30 +++
 ...rules-for-var-log-symlink-audisp_remote_t.patch |   29 +++
 .../refpolicy/refpolicy-minimum_2.20130424.bb      |   46 +++++
 ...olicy-fix-optional-issue-on-sysadm-module.patch |   60 ++++++
 .../refpolicy-unconfined_u-default-user.patch      |  198 ++++++++++++++++++++
 .../refpolicy/refpolicy-targeted_2.20130424.bb     |   18 ++
 .../refpolicy/refpolicy_2.20130424.inc             |    3 +
 8 files changed, 414 insertions(+)
 create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/filesystem-associate-tmpfs_t-shm-to-device_t-devtmpf.patch
 create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-policy-add-rules-for-syslogd_t-symlink.patch
 create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch
 create mode 100644 recipes-security/refpolicy/refpolicy-minimum_2.20130424.bb
 create mode 100644 recipes-security/refpolicy/refpolicy-targeted/refpolicy-fix-optional-issue-on-sysadm-module.patch
 create mode 100644 recipes-security/refpolicy/refpolicy-targeted/refpolicy-unconfined_u-default-user.patch
 create mode 100644 recipes-security/refpolicy/refpolicy-targeted_2.20130424.bb
Signature · 1 line
1.7.9.5