[yocto] [meta-selinux][PATCH] libselinux: python-importlib is now part of python*-core

Rudolf J Streif rudolf.streif at gmail.com
Fri May 11 10:28:26 PDT 2018


Echoing this: may I ask what the current maintenance status of
meta-selinux is. It appears that no updates have been made for more than
9 months. This is of course not to blame anybody but out of concern that
the layer is falling behind even more and to find a solution.

In addition to Armin's patches there are two patches submitted by Kai
Kang at Windriver:

* https://lists.yoctoproject.org/pipermail/yocto/2018-February/039917.html
* https://lists.yoctoproject.org/pipermail/yocto/2018-February/039918.html

Curiously enough, the second patch has been applied to master but not
the first one.


There is also an issue with building SELinux with systemd. The layer
enables auditing:

meta-selinux/classes/enable-audit.bbclass:PACKAGECONFIG[audit] =
"--enable-audit,--disable-audit,audit,"
meta-selinux/recipes-core/systemd/systemd_%.bbappend:inherit
${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'enable-audit', '', d)}

Apparently the --enable-audit switch is passed to meson when running the
configure task, which meson does not appreciate. I am not that familiar
with the audit feature nor with meson, so I currently have no idea on
how to fix this the right way.


Further, refpolicy_git does not build anymore as the YP specific patches
do not apply anymore since upstream changed.


Thanks,
Rudi



On 05/07/2018 10:20 AM, akuster808 wrote:
>
> On 04/14/2018 07:08 PM, Armin Kuster wrote:
>> Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'restorecond', 'libselinux', 'python-importlib']
>>
>> Signed-off-by: Armin Kuster <akuster at mvista.com>
> ping
>> ---
>>  recipes-security/selinux/libselinux.inc | 2 +-
>>  1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/recipes-security/selinux/libselinux.inc b/recipes-security/selinux/libselinux.inc
>> index bd5ce8d..51d0875 100644
>> --- a/recipes-security/selinux/libselinux.inc
>> +++ b/recipes-security/selinux/libselinux.inc
>> @@ -8,7 +8,7 @@ LICENSE = "PD"
>>  inherit lib_package pythonnative
>>  
>>  DEPENDS += "libsepol python libpcre swig-native"
>> -RDEPENDS_${PN}-python += "python-importlib"
>> +RDEPENDS_${PN}-python += "python-core"
>>  
>>  PACKAGES += "${PN}-python"
>>  FILES_${PN}-python = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/*"

-- 
Rudolf J Streif


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.yoctoproject.org/pipermail/yocto/attachments/20180511/3f972c3d/attachment-0001.pgp>


More information about the yocto mailing list