[yocto] [meta-security][PATCH 2/2] smack kernel: add smack kernel config fragments

akuster808 akuster808 at gmail.com
Fri Oct 28 08:41:17 PDT 2016



On 10/28/2016 04:20 AM, Patrick Ohly wrote:
> On Thu, 2016-10-27 at 19:32 -0700, Khem Raj wrote:
>>> On Oct 27, 2016, at 12:22 AM, Patrick Ohly <patrick.ohly at intel.com> wrote:
>>> Can you say a bit more about your plans regarding Smack support in
>>> meta-security? A recipe for the userspace tool and the kernel config is
>>> a start, but for a fully functional Smack-enabled image, the rootfs also
>>> needs to be set up a bit differently.
>> FWIW meta-security seems to be right place for smack related infra.
> I don't disagree :-) But it would be good to know more about the rest of
> the infrastructure before adding (or reviewing) bits and pieces that by
> themselves don't do much.
I start of with basic support and refine over time.  Your statement can 
apply for many components within meta-secuirty. I recently started 
adding test images. Providing configurations or solutions for a niche 
area is outside the scope for this general layer, IMHO. I could be 
convinced  otherwise. I tend not to wait for 100% solution before 
sending out bits for review.

thanks for your input.

Regards,
Armin
>




More information about the yocto mailing list