[yocto] [PATCH 1/1][meta-selinux] refpolicy: correct SELINUX_DEVEL_PATH

wenzong.fan at windriver.com wenzong.fan at windriver.com
Thu Jul 9 00:58:56 PDT 2015


From: Wenzong Fan <wenzong.fan at windriver.com>

The sepolgen.conf should be installed with devel package to correct
the default value of SELINUX_DEVEL_PATH, Makefile will be searched from
that path while building policies on target.

Signed-off-by: Wenzong Fan <wenzong.fan at windriver.com>
---
 recipes-security/refpolicy/refpolicy_common.inc | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index 0dc055e..620e7c0 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -15,7 +15,10 @@ FILES_${PN} = " \
 	${sysconfdir}/selinux/${POLICY_NAME}/ \
 	${datadir}/selinux/${POLICY_NAME}/*.pp \
 	"
-FILES_${PN}-dev =+ "${datadir}/selinux/${POLICY_NAME}/include/"
+FILES_${PN}-dev =+ " \
+        ${datadir}/selinux/${POLICY_NAME}/include/ \
+        ${sysconfdir}/selinux/sepolgen.conf \
+"
 
 DEPENDS += "checkpolicy-native policycoreutils-native m4-native"
 RDEPENDS_${PN} += "selinux-config"
@@ -122,3 +125,8 @@ do_install () {
 	rebuild_policy
 	install_misc_files
 }
+
+do_install_append(){
+	# While building policies on target, Makefile will be searched from SELINUX_DEVEL_PATH
+	echo "SELINUX_DEVEL_PATH=${datadir}/selinux/${POLICY_NAME}/include" > ${D}${sysconfdir}/selinux/sepolgen.conf
+}
-- 
1.9.1




More information about the yocto mailing list