[yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.

[Joe MacDonald]

Thought I'd best (finally) follow up to the list on this.  I've been
talking to Philip offline.  These are in the queue for integration but
some surprising things have cropped up along the way and the integration
is being delayed a bit.

I'll be grabbing the other meta-selinux update at the same time.

-J.

[[yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.] On 13.10.17 (Thu 19:06) Philip Tricca wrote:

> This is a resend of an earlier patch set that never made it to the list
> AFAIK.
> 
> The reference policy package currently pulls in a lot of python stuff
> that isn't strictly necessary to boot an SELinux system and load a
> policy. AFAIK this is caused by the mix of python and C utilities in
> policycoreutils.
> 
> This patch set breaks the policycoreutils recipe up into multiple
> packages, one for each utility. In this way we can have the refpol etc
> pull in only the utilities necessary for normal operation. This happens
> to be only the utilities written in C and thus we can remove python
> completely in a minimal image.
> 
> I've attempted to localize these changes as much as possible so this
> patch set should have minimal impact on recipes outside of the
> policycoreutils. An example image reicpe is added to demonstrate a
> minimal image with only the utilities required to load a policy and
> manipulate the policy store (add / remove policy modules) at runtime.
> 
> Regards,
> - Philip
> 
> Philip Tricca (5):
>  Break policycoreutils out into separate
>  Remove unnecessary RDEPENDS_${BPN}.
>  Remove runtime dependency on
>  Add packagegroup and image recipe for
>  Add packagegroup for policycoreutils
> 
>  .../images/core-image-selinux-minimal.bb           |   15 ++
>  .../packagegroups/packagegroup-core-selinux.bb     |    4 +-
>  .../packagegroups/packagegroup-selinux-minimal.bb  |   26 +++
>  .../packagegroup-selinux-policycoreutils.bb        |   36 ++++
>  recipes-security/refpolicy/refpolicy_common.inc    |    2 +-
>  recipes-security/selinux/policycoreutils.inc       |  179 +++++++++++++++++--
>  6 files changed, 245 insertions(+), 17 deletions(-)
> 
> _______________________________________________
> yocto mailing list
> yocto at yoctoproject.org
> https://lists.yoctoproject.org/listinfo/yocto

-- 
-Joe MacDonald.
:wq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.yoctoproject.org/pipermail/yocto/attachments/20131021/9fcf2831/attachment.pgp>