[yocto] [meta-selinux] Stage SELinux config file in the sysroot.

Philip Tricca flihp at twobit.us
Sun Sep 22 21:25:33 PDT 2013


Cc'ing Mark.

On 09/22/2013 11:51 PM, Philip Tricca wrote:
> This is needed to build policy modules outside of the refpolicy.
> Policy module build systems need to determine the name of the policy
> that will be in effect on the target host. This allows them to
> locate the policy headers that will be under
> $sysroot/usr/share/selinux/$name/include. Given that there *could*
> be more than one policy installed in the sysroot we can't assume
> that the policy installed there is the only policy to build against.
> 
> Signed-off-by: Philip Tricca <flihp at twobit.us>
> ---
>  recipes-security/selinux/selinux-config_0.1.bb |    3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/recipes-security/selinux/selinux-config_0.1.bb b/recipes-security/selinux/selinux-config_0.1.bb
> index 9521dcf..ad0d647 100644
> --- a/recipes-security/selinux/selinux-config_0.1.bb
> +++ b/recipes-security/selinux/selinux-config_0.1.bb
> @@ -43,3 +43,6 @@ SELINUXTYPE=${DEFAULT_POLICY}
>  	install -m 0644 ${WORKDIR}/config ${D}/${sysconfdir}/selinux/
>  }
>  
> +sysroot_stage_all_append () {
> +	sysroot_stage_dir ${D}${sysconfdir} ${SYSROOT_DESTDIR}${sysconfdir}
> +}
> 




More information about the yocto mailing list