[yocto] [meta-selinux][PATCH] selinux: update policy-version to 30

wenzong.fan at windriver.com wenzong.fan at windriver.com
Thu Sep 22 03:19:47 PDT 2016


From: Wenzong Fan <wenzong.fan at windriver.com>

Both selinux 2.5 and kernel 4.8 support Max Policy Version 30.

Signed-off-by: Wenzong Fan <wenzong.fan at windriver.com>
---
 recipes-security/refpolicy/refpolicy_common.inc | 2 +-
 recipes-security/selinux/libsemanage.inc        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc
index a9dc466..ea98139 100644
--- a/recipes-security/refpolicy/refpolicy_common.inc
+++ b/recipes-security/refpolicy/refpolicy_common.inc
@@ -125,7 +125,7 @@ path = ${STAGING_DIR_NATIVE}${sbindir_native}/sefcontext_compile
 args = \$@
 [end]
 
-policy-version = 28
+policy-version = 30
 EOF
 
 	# Create policy store and build the policy
diff --git a/recipes-security/selinux/libsemanage.inc b/recipes-security/selinux/libsemanage.inc
index 6bb57a0..41fd3f5 100644
--- a/recipes-security/selinux/libsemanage.inc
+++ b/recipes-security/selinux/libsemanage.inc
@@ -44,7 +44,7 @@ do_install() {
             PYLIBDIR='${D}/${libdir}/$(PYLIBVER)'
 
     # Update "policy-version" for semanage.conf
-    sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 28/' \
+    sed -i 's/^#\s*\(policy-version\s*=\).*$/\1 30/' \
 	${D}/etc/selinux/semanage.conf
 }
 
-- 
2.8.1




More information about the yocto mailing list