Skip to contentSkip to conversation

package/openssh: enable selinux ssh module for refpolicy

PATCH Applied Adam Duskett 2 participants 4 messages Dec 3, 2021 – Dec 27, 2021

lore
Share & tools
lore

Adam Duskett

author
#0 lore raw

PATCH 1/2 package/openssh: enable selinux ssh module for refpolicy

This is needed for ssh to work with SELinux.

Signed-off-by Adam Duskett <[email protected]>
---
 package/openssh/openssh.mk | 2 ++
 1 file changed, 2 insertions(+)
package/openssh/openssh.mk +2 -0
index 75c4a0128b..4145bfd8dc 100644
@@ -27,6 +27,8 @@ OPENSSH_CONF_OPTS = \
 	--disable-wtmpx \
 	--disable-strip
 
+OPENSSH_SELINUX_MODULES = ssh
+
 define OPENSSH_PERMISSIONS
 	/var/empty d 755 root root - - - - -
 endef
Signature · 6 lines
2.33.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
author
#1 lore raw

PATCH 2/2 package/coreutils: enable selinux support

Enable SELinux support if libselinux is selected. This allows utilities such as ls to read and display extended attributes with ls -lZ

Signed-off-by Adam Duskett <[email protected]>
---
 package/coreutils/coreutils.mk | 7 +++++++
 1 file changed, 7 insertions(+)
package/coreutils/coreutils.mk +7 -0
index 6822c58a32..78bafb635b 100644
@@ -98,6 +98,13 @@ else
 COREUTILS_CONF_OPTS += --disable-libcap
 endif
 
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+COREUTILS_DEPENDENCIES += libselinux
+COREUTILS_CONF_OPTS += --with-selinux
+else
+COREUTILS_CONF_OPTS += --without-selinux
+endif
+
 ifeq ($(BR2_PACKAGE_OPENSSL),y)
 COREUTILS_CONF_OPTS += --with-openssl=yes
 COREUTILS_DEPENDENCIES += openssl
Signature · 6 lines
2.33.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
Applied
#2 lore raw

Re: [Buildroot] [PATCH 2/2] package/coreutils: enable selinux support

Quoted 7 lines · On Fri, 3 Dec 2021 10:01:05 -0800 Adam Duskett <[email protected]> wrote:

Enable SELinux support if libselinux is selected. This allows utilities such as ls to read and display extended attributes with ls -lZ

Signed-off-by Adam Duskett <[email protected]>
---
 package/coreutils/coreutils.mk | 7 +++++++
 1 file changed, 7 insertions(+)

Applied to master, thanks.

Thomas

Signature · 7 lines
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
Applied
#3 lore raw
In reply to Adam Duskett
Quoted 6 lines · On Fri, 3 Dec 2021 10:01:04 -0800 Adam Duskett <[email protected]> wrote:

This is needed for ssh to work with SELinux.

Signed-off-by Adam Duskett <[email protected]>
---
 package/openssh/openssh.mk | 2 ++
 1 file changed, 2 insertions(+)

Applied to master, thanks.

Thomas

Signature · 7 lines
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot