[yocto] [PATCH] Update SELinux configuration.

Alexandru.Vaduva Alexandru.Vaduva at enea.com
Fri Jul 17 02:07:36 PDT 2015


From: Siva Borra <siva.borra at enea.com>

Update SELinux with all dependant confuguation
options enabled/disabled.

[LXCR-5167]

Signed-off-by: Siva Borra <siva.borra at enea.com>
Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva at enea.com>
---
 .../linux/files/cfg/00014-selinux.cfg              | 29 ++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg b/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
index 377ec83..ce7d61d 100644
--- a/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
+++ b/meta-cgl-common/recipes-kernel/linux/files/cfg/00014-selinux.cfg
@@ -1 +1,30 @@
+CONFIG_DEFAULT_SECURITY_SELINUX=y
+CONFIG_SECURITY=y
+CONFIG_SYSFS=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_AUDIT=y
+CONFIG_NET=y
+CONFIG_INET=y
 CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_NETWORK_XFRM=y
+CONFIG_NETWORK_SECMARK=y
+CONFIG_EXT2_FS_XATTR=y
+CONFIG_EXT3_FS_XATTR=y
+CONFIG_EXT4_FS_XATTR=y
+CONFIG_REISERFS_FS_XATTR=y
+CONFIG_JFFS2_FS_XATTR=y
+CONFIG_EXT2_FS_SECURITY=y
+CONFIG_EXT3_FS_SECURITY=y
+CONFIG_EXT4_FS_SECURITY=y
+CONFIG_JFS_SECURITY=y
+CONFIG_REISERFS_FS_SECURITY=y
+CONFIG_JFFS2_FS_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
+CONFIG_SECURITY_SELINUX_DISABLE=y
+CONFIG_SECURITY_SELINUX_DEVELOP=y
+CONFIG_SECURITY_SELINUX_AVC_STATS=y
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
+CONFIG_AUDIT_ARCH=n
+CONFIG_AUDIT_GENERIC=y
-- 
1.9.1




More information about the yocto mailing list