[yocto] [meta-security][PATCH 2/2] smack kernel: add smack kernel config fragments
akuster808
akuster808 at gmail.com
Fri Oct 28 08:41:17 PDT 2016
On 10/28/2016 04:20 AM, Patrick Ohly wrote:
> On Thu, 2016-10-27 at 19:32 -0700, Khem Raj wrote:
>>> On Oct 27, 2016, at 12:22 AM, Patrick Ohly <patrick.ohly at intel.com> wrote:
>>> Can you say a bit more about your plans regarding Smack support in
>>> meta-security? A recipe for the userspace tool and the kernel config is
>>> a start, but for a fully functional Smack-enabled image, the rootfs also
>>> needs to be set up a bit differently.
>> FWIW meta-security seems to be right place for smack related infra.
> I don't disagree :-) But it would be good to know more about the rest of
> the infrastructure before adding (or reviewing) bits and pieces that by
> themselves don't do much.
I start of with basic support and refine over time. Your statement can
apply for many components within meta-secuirty. I recently started
adding test images. Providing configurations or solutions for a niche
area is outside the scope for this general layer, IMHO. I could be
convinced otherwise. I tend not to wait for 100% solution before
sending out bits for review.
thanks for your input.
Regards,
Armin
>
More information about the yocto
mailing list