[yocto] [PATCH] Update SELinux configuration.
Alexandru.Vaduva
Alexandru.Vaduva at enea.com
Fri Jul 17 02:07:36 PDT 2015
From: Siva Borra <siva.borra at enea.com>
Update SELinux with all dependant confuguation
options enabled/disabled.
[LXCR-5167]
Signed-off-by: Siva Borra <siva.borra at enea.com>
Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva at enea.com>
---
.../linux/files/cfg/00014-selinux.cfg | 29 ++++++++++++++++++++++
1 file changed, 29 insertions(+)
diff --git a/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg b/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
index 377ec83..ce7d61d 100644
--- a/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
+++ b/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
@@ -1 +1,30 @@
+CONFIG_DEFAULT_SECURITY_SELINUX=y
+CONFIG_SECURITY=y
+CONFIG_SYSFS=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_AUDIT=y
+CONFIG_NET=y
+CONFIG_INET=y
CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_NETWORK_XFRM=y
+CONFIG_NETWORK_SECMARK=y
+CONFIG_EXT2_FS_XATTR=y
+CONFIG_EXT3_FS_XATTR=y
+CONFIG_EXT4_FS_XATTR=y
+CONFIG_REISERFS_FS_XATTR=y
+CONFIG_JFFS2_FS_XATTR=y
+CONFIG_EXT2_FS_SECURITY=y
+CONFIG_EXT3_FS_SECURITY=y
+CONFIG_EXT4_FS_SECURITY=y
+CONFIG_JFS_SECURITY=y
+CONFIG_REISERFS_FS_SECURITY=y
+CONFIG_JFFS2_FS_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
+CONFIG_SECURITY_SELINUX_DISABLE=y
+CONFIG_SECURITY_SELINUX_DEVELOP=y
+CONFIG_SECURITY_SELINUX_AVC_STATS=y
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
+CONFIG_AUDIT_ARCH=n
+CONFIG_AUDIT_GENERIC=y
--
1.9.1
More information about the yocto
mailing list