[yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.

[Philip Tricca]

This is a resend of an earlier patch set that never made it to the list
AFAIK.

The reference policy package currently pulls in a lot of python stuff
that isn't strictly necessary to boot an SELinux system and load a
policy. AFAIK this is caused by the mix of python and C utilities in
policycoreutils.

This patch set breaks the policycoreutils recipe up into multiple
packages, one for each utility. In this way we can have the refpol etc
pull in only the utilities necessary for normal operation. This happens
to be only the utilities written in C and thus we can remove python
completely in a minimal image.

I've attempted to localize these changes as much as possible so this
patch set should have minimal impact on recipes outside of the
policycoreutils. An example image reicpe is added to demonstrate a
minimal image with only the utilities required to load a policy and
manipulate the policy store (add / remove policy modules) at runtime.

Regards,
- Philip

Philip Tricca (5):
 Break policycoreutils out into separate
 Remove unnecessary RDEPENDS_${BPN}.
 Remove runtime dependency on
 Add packagegroup and image recipe for
 Add packagegroup for policycoreutils

 .../images/core-image-selinux-minimal.bb           |   15 ++
 .../packagegroups/packagegroup-core-selinux.bb     |    4 +-
 .../packagegroups/packagegroup-selinux-minimal.bb  |   26 +++
 .../packagegroup-selinux-policycoreutils.bb        |   36 ++++
 recipes-security/refpolicy/refpolicy_common.inc    |    2 +-
 recipes-security/selinux/policycoreutils.inc       |  179 +++++++++++++++++--
 6 files changed, 245 insertions(+), 17 deletions(-)