[yocto] [meta-selinux][PATCH v2] systemd: create /var/lib/systemd/backlight in advance

wenzong.fan at windriver.com wenzong.fan at windriver.com
Fri Apr 20 03:45:29 PDT 2018


From: Wenzong Fan <wenzong.fan at windriver.com>

v2 changes:
* Update patch for Yocto Compat - don't change layer's hash

============================================

The systemd-backlight at .service which called after selinux-init.service
will create /var/lib/systemd/backlight with incorrect security labels,
this causes the systemd-backlight service fails to start and stop.

Creating /var/lib/systemd/backlight in advance to make sure it could
always be relabelled by selinux-init while first booting.

Signed-off-by: Wenzong Fan <wenzong.fan at windriver.com>
---
 recipes-core/systemd/systemd_%.bbappend  | 2 +-
 recipes-core/systemd/systemd_selinux.inc | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 recipes-core/systemd/systemd_selinux.inc

diff --git a/recipes-core/systemd/systemd_%.bbappend b/recipes-core/systemd/systemd_%.bbappend
index 5ac3adb..7719d3b 100644
--- a/recipes-core/systemd/systemd_%.bbappend
+++ b/recipes-core/systemd/systemd_%.bbappend
@@ -1 +1 @@
-inherit ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'enable-audit', '', d)}
+require ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', '${BPN}_selinux.inc', '', d)}
diff --git a/recipes-core/systemd/systemd_selinux.inc b/recipes-core/systemd/systemd_selinux.inc
new file mode 100644
index 0000000..b17e70a
--- /dev/null
+++ b/recipes-core/systemd/systemd_selinux.inc
@@ -0,0 +1,7 @@
+inherit ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'enable-audit', '', d)}
+
+do_install_append() {
+	if ${@bb.utils.contains('PACKAGECONFIG', 'backlight', 'true', 'false', d)}; then
+		install -d ${D}${localstatedir}/lib/systemd/backlight
+	fi
+}
-- 
2.8.1




More information about the yocto mailing list