Re: [yocto] [meta-selinux][PATCH] busybox: Fix wrapper creation

Looks good to me. Thanks, Yi On 3/22/24 23:54, Philip Lorenz wrote: `PACKAGEBUILDPKGD` was dropped in Yocto 4.2 and `PACKAGE_PREPROCESS_FUNCS` should be used instead. The only requirement for wrapper creation is that it is executed before any of the `update-alternatives` hooks are executed.

[yocto] [meta-selinux][PATCH] layer.conf: update for the scarthgap release series

Signed-off-by: Yi Zhao --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index 0a0a6ab..4e04e5c 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -17,7 +17,7 @@ BBFILE_PRIORITY_selinux = "5" # cause compatibil

[yocto] [meta-selinux][PATCH] refpolicy: upgrade 20231002+git -> 20240226+git

to io_uring:cmd Add additional rules to cloud-init based on sysadm_t * Update to latest git rev. * Refresh patches. * Add a patch to fix reboot timeout error. Signed-off-by: Yi Zhao --- ...tile-alias-common-var-volatile-paths.patch | 2 +- ...inimum-make-sysadmin-module-optional.patch | 6

[yocto] [meta-selinux][PATCH] refpolicy: drop ${SRCPV} usage

Drop SRCPV as this variable is no longer needed in PV[1]. [1] https://git.openembedded.org/openembedded-core/commit/?id=a8e7b0f932b9ea69b3a218fca18041676c65aba0 Signed-off-by: Yi Zhao --- recipes-security/refpolicy/refpolicy_git.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff

[yocto] [meta-selinux][PATCH] libselinux-python: add recipe

PACKAGECONFIG:append:pn-python3 = \" tk\"" >> conf/local.conf $ bitbake core-image-selinux -n So we still need to split the libselinux recipe into two recipes: libselinux and libselinux-python. [1] https://git.yoctoproject.org/meta-selinux/commit/?id=62b9c816a500

[yocto] [meta-selinux][PATCH 15/15] setools: upgrade 4.4.3 -> 4.4.4

ChangeLog: https://github.com/SELinuxProject/setools/releases/tag/4.4.4 * Refresh local patch Signed-off-by: Yi Zhao --- .../setools/setools4-fixes-for-cross-compiling.patch | 8 .../setools/{setools_4.4.3.bb => setools_4.4.4.bb}| 2 +- 2 files changed, 5 insertions(+)

[yocto] [meta-selinux][PATCH 14/15] semodule-utils: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{semodule-utils_3.5.bb => semodule-utils_3.6.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{semodule-utils_3.5.bb => semodule-utils_3.6.bb} (100%) diff --git a/recipes-security/selinux/semodule-utils_

[yocto] [meta-selinux][PATCH 13/15] selinux-sandbox: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{selinux-sandbox_3.5.bb => selinux-sandbox_3.6.bb}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{selinux-sandbox_3.5.bb => selinux-sandbox_3.6.bb} (100%) diff --git a/recipes-security/selinux/selinux-sandb

[yocto] [meta-selinux][PATCH 12/15] selinux-gui: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{selinux-gui_3.5.bb => selinux-gui_3.6.bb}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{selinux-gui_3.5.bb => selinux-gui_3.6.bb} (100%) diff --git a/recipes-security/selinux/selinux-gui_3.5

[yocto] [meta-selinux][PATCH 11/15] selinux-dbus: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{selinux-dbus_3.5.bb => selinux-dbus_3.6.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{selinux-dbus_3.5.bb => selinux-dbus_3.6.bb} (100%) diff --git a/recipes-security/selinux/selinux-dbus_3.5

[yocto] [meta-selinux][PATCH 10/15] selinux-python: upgrade 3.5 -> 3.6

* Refresh patch Signed-off-by: Yi Zhao --- .../selinux/selinux-python/fix-sepolicy-install-path.patch| 4 ++-- .../selinux/{selinux-python_3.5.bb => selinux-python_3.6.bb} | 0 2 files changed, 2 insertions(+), 2 deletions(-) rename recipes-security/selinux/{selinux-python_3.5

[yocto] [meta-selinux][PATCH 09/15] restorecond: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{restorecond_3.5.bb => restorecond_3.6.bb}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{restorecond_3.5.bb => restorecond_3.6.bb} (100%) diff --git a/recipes-security/selinux/restorecond_3.5

[yocto] [meta-selinux][PATCH 08/15] mcstrans: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- recipes-security/selinux/{mcstrans_3.5.bb => mcstrans_3.6.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{mcstrans_3.5.bb => mcstrans_3.6.bb} (100%) diff --git a/recipes-security/selinux/mcstrans_3.5.bb b/recipes-se

[yocto] [meta-selinux][PATCH 07/15] policycoreutils: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{policycoreutils_3.5.bb => policycoreutils_3.6.bb}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{policycoreutils_3.5.bb => policycoreutils_3.6.bb} (100%) diff --git a/recipes-security/selinux/policycoreuti

[yocto] [meta-selinux][PATCH 06/15] secilc: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- recipes-security/selinux/{secilc_3.5.bb => secilc_3.6.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{secilc_3.5.bb => secilc_3.6.bb} (100%) diff --git a/recipes-security/selinux/secilc_3.5.bb b/recipes-security/s

[yocto] [meta-selinux][PATCH 05/15] checkpolicy: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- .../selinux/{checkpolicy_3.5.bb => checkpolicy_3.6.bb}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{checkpolicy_3.5.bb => checkpolicy_3.6.bb} (100%) diff --git a/recipes-security/selinux/checkpolicy_3.5

[yocto] [meta-selinux][PATCH 03/15] libselinux: upgrade 3.5 -> 3.6

/?id=7bb1507928f2e0f54ff8eac4135e15e821cdb1e2 Signed-off-by: Yi Zhao --- ...hon-modules-install-path-for-multili.patch | 10 +++--- ...T-and-rely-on-the-installed-file-nam.patch | 8 ++--- ...re-drop-the-obsolete-LSF-transitiona.patch | 21 ++-- recipes-security/selinux/libselinux_3.5.bb

[yocto] [meta-selinux][PATCH 04/15] libsemanage: upgrade 3.5 -> 3.6

* Refresh patches Signed-off-by: Yi Zhao --- ...anage-Fix-execve-segfaults-on-Ubuntu.patch | 4 ++-- ...anage-allow-to-disable-audit-support.patch | 22 +-- ...-disable-expand-check-on-policy-load.patch | 2 +- ...{libsemanage_3.5.bb => libsemanage_3.6.bb} | 0 4 fi

[yocto] [meta-selinux][PATCH 01/15] selinux: upgrade 3.5 -> 3.6

ChangeLog: https://github.com/SELinuxProject/selinux/releases/tag/3.6 * Switch branch to main Signed-off-by: Yi Zhao --- recipes-security/selinux/selinux_common.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-security/selinux/selinux_common.inc b/recipes

[yocto] [[meta-selinux]PATCH 02/15] libsepol: upgrade 3.5 -> 3.6

Signed-off-by: Yi Zhao --- recipes-security/selinux/{libsepol_3.5.bb => libsepol_3.6.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{libsepol_3.5.bb => libsepol_3.6.bb} (100%) diff --git a/recipes-security/selinux/libsepol_3.5.bb b/recipes-se

[yocto] [meta-selinux][PATCH 1/2] refpolicy: update to latest git rev

-printer/ Signed-off-by: Yi Zhao --- recipes-security/refpolicy/refpolicy_git.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/refpolicy/refpolicy_git.inc b/recipes-security/refpolicy/refpolicy_git.inc index 1913ec8..d739522 100644 --- a/recipes-security

[yocto] [meta-selinux][PATCH] refpolicy: upgrade 20221101+git -> 20231002+git

* Switch branch to main. * Update to latest git rev. * Drop obsolete and useless patches. * Refresh patches. Signed-off-by: Yi Zhao --- ...tile-alias-common-var-volatile-paths.patch | 2 +- ...inimum-make-sysadmin-module-optional.patch | 10 +-- ...ed-make-unconfined_u-the-default-sel.patch

[yocto] [meta-selinux][PATCH] layer.conf: update LAYERSERIES_COMPAT for nanbield

oe-core has switched to nanbield in: https://git.openembedded.org/openembedded-core/commit/?id=f212cb12a0db9c9de5afd3cc89b1331d386e55f6 Signed-off-by: Yi Zhao --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index 8bdc3de

[yocto] [meta-selinux][PATCH 3/3] README: update

Add how to enable labeling on first boot. Signed-off-by: Yi Zhao --- README | 8 1 file changed, 8 insertions(+) diff --git a/README b/README index 77b6253..67708f7 100644 --- a/README +++ b/README @@ -75,6 +75,14 @@ VIRTUAL-RUNTIME_init_manager = "sy

[yocto] [meta-selinux][PATCH 1/3] selinux-image.bbclass: refactor bbclass

during build. Signed-off-by: Yi Zhao --- classes/selinux-image.bbclass | 32 +++- 1 file changed, 23 insertions(+), 9 deletions(-) diff --git a/classes/selinux-image.bbclass b/classes/selinux-image.bbclass index 23645b7..b4f9321 100644 --- a/classes/selinux

[yocto] [meta-selinux][PATCH 2/3] selinux-autorelabel: enable labeling during build

to enable labeling on first boot. Signed-off-by: Yi Zhao --- recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb b/recipes-security/selinux-scripts/selinux

[yocto] [meta-security][PATCH] scap-security-guide: pass the correct cpe/schemas/xsl paths to oscap

tries to find the schema files in build-1 directory since these paths are hardcoded when building openscap-native. We need to pass the correct cpe/schemas/xsl paths to oscap to make sure it can find the files in right location. Signed-off-by: Yi Zhao --- .../scap-security-guide/scap-security

[yocto] [meta-selinux][PATCH 3/3] linux-yocto: drop CONFIG_SECURITY_SELINUX_DISABLE

-by: Yi Zhao --- recipes-kernel/linux/files/selinux.cfg | 1 - 1 file changed, 1 deletion(-) diff --git a/recipes-kernel/linux/files/selinux.cfg b/recipes-kernel/linux/files/selinux.cfg index a081095..8333a05 100644 --- a/recipes-kernel/linux/files/selinux.cfg +++ b/recipes-kernel/linux/files

[yocto] [meta-selinux][PATCH 2/3] libselinux-python: fix build with musl

libselinux-python also requires the patch which provided by [1] to fix build with musl. [1] https://git.yoctoproject.org/meta-selinux/commit/?id=23d8e2d86317170c0a3c155640c71b83329ff726 Signed-off-by: Yi Zhao --- recipes-security/selinux/libselinux-python_3.5.bb | 1 + 1 file changed, 1

[yocto] [meta-selinux][PATCH 1/3] selinux-python: add python3-distro and binutils to RDEPENDS

argument("-o", "--os", dest="os", default=get_os_version(), File "/usr/lib/python3.11/site-packages/sepolicy/__init__.py", line 1245, in get_os_version import distro ModuleNotFoundError: No module named 'distro' $ sepolicy generate --init /usr/sbin/ss

[yocto] [meta-selinux][PATCH] setools: upgrade 4.4.2 -> 4.4.3

ChangeLog: https://github.com/SELinuxProject/setools/releases/tag/4.4.3 Signed-off-by: Yi Zhao --- recipes-security/setools/{setools_4.4.2.bb => setools_4.4.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/setools/{setools_4.4.2.bb => setools_4.4.3.b

Re: [yocto] Missing pam_winbind.so while adding Samba(4.10.10-r0)

On 7/21/23 13:06, Poornesh G ( India - Bangalore ) wrote: Greeetings ! I am trying to include "samba" into my yocto build . I can able to see *"pam_winbind.so

[yocto] [meta-selinux][PATCH 2/2] linux-yocto: drop CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE

CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is deprecated and will be rejected in a future kernel release[1]. [1] https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-checkreqprot Signed-off-by: Yi Zhao --- recipes-kernel/linux/files/selinux.cfg | 1 - 1 file changed, 1 deletion

[yocto] [meta-selinux][PATCH 1/2] setools: upgrade 4.1 -> 4.2

ChangeLog: https://github.com/SELinuxProject/setools/releases/tag/4.4.2 Signed-off-by: Yi Zhao --- recipes-security/setools/{setools_4.4.1.bb => setools_4.4.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/setools/{setools_4.4.1.bb => setools_4.4.2.b

[yocto] [meta-selinux][PATCH V2] refpolicy: update to latest git rev

Drop 0003-refpolicy-minimum-make-dbus-module-optional.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao --- .../refpolicy/refpolicy-minimum_git.bb| 1 - ...cy-minimum-make-dbus-module-optional.patch | 36 --- recipes-security/refpolicy/refpolicy_git.inc

[yocto] [meta-selinux][PATCH 17/17] semodule-utils: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- .../selinux/{semodule-utils_3.4.bb => semodule-utils_3.5.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{semodule-utils_3.4.bb => semodule-utils_3.5.b

[yocto] [meta-selinux][PATCH 16/17] selinux-sandbox: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 49 --- ...-sandbox_3.4.bb => selinux-sandbox_3.5.bb} | 3 +- 2 files changed, 1 insertion(+), 51 deleti

[yocto] [meta-selinux][PATCH 15/17] selinux-gui: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 199 -- ...{selinux-gui_3.4.bb => selinux-gui_3.5.bb} | 4 +- 2 files changed, 1 insertion(+), 202 deleti

[yocto] [meta-selinux][PATCH 14/17] selinux-dbus: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- .../selinux/{selinux-dbus_3.4.bb => selinux-dbus_3.5.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{selinux-dbus_3.4.bb => selinux-dbus_3.5.bb

[yocto] [meta-selinux][PATCH 13/17] selinux-python: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. * Refresh patch. * Drop backport patch. * Add dependency python3-setuptools-scm-native to fix build error. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 173 -- .../fix-sepolicy-install

[yocto] [meta-selinux][PATCH 12/17] restorecond: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- .../selinux/{restorecond_3.4.bb => restorecond_3.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{restorecond_3.4.bb => restorecond_3.5.bb

[yocto] [meta-selinux][PATCH 11/17] mcstrans: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- recipes-security/selinux/{mcstrans_3.4.bb => mcstrans_3.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{mcstrans_3.4.bb => mcstrans_3.5.bb} (96%) diff

[yocto] [meta-selinux][PATCH 10/17] policycoreutils: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. * Refresh patch. Signed-off-by: Yi Zhao --- .../policycoreutils-fixfiles-de-bashify.patch | 8 .../{policycoreutils_3.4.bb => policycoreutils_3.5.bb}| 4 ++-- 2 files changed, 6 insertions(+), 6 deleti

[yocto] [meta-selinux][PATCH 09/17] secilc: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- recipes-security/selinux/{secilc_3.4.bb => secilc_3.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{secilc_3.4.bb => secilc_3.5.bb} (84%) diff --git a/r

[yocto] [meta-selinux][PATCH 08/17] checkpolicy: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- .../selinux/{checkpolicy_3.4.bb => checkpolicy_3.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{checkpolicy_3.4.bb => checkpolicy_3.5.bb

[yocto] [meta-selinux][PATCH 07/17] libsemanage: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by: Yi Zhao --- .../{libsemanage_3.4.bb => libsemanage_3.5.bb} | 13 +++-- 1 file changed, 7 insertions(+), 6 deletions(-) rename recipes-security/selinux/{libsemanage_3.4.bb => libsemanage_3.5.bb

[yocto] [meta-selinux][PATCH 06/17] libselinux-python: upgrade 3.4 -> 3.5

* Add dependency python3-setuptools-scm-native to fix build error. * Refresh patches. Signed-off-by: Yi Zhao --- ...inux-python_3.4.bb => libselinux-python_3.5.bb} | 14 +- ...x-python-modules-install-path-for-multili.patch | 10 +- ...PYCEXT-and-rely-on-the-installed-f

[yocto] [meta-selinux][PATCH 05/17] libselinux: upgrade 3.4 -> 3.5

Signed-off-by: Yi Zhao --- recipes-security/selinux/{libselinux_3.4.bb => libselinux_3.5.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/selinux/{libselinux_3.4.bb => libselinux_3.5.bb} (100%) diff --git a/recipes-security/selinux/libselinux_3.4.bb b/r

[yocto] [meta-selinux][PATCH 03/17] selinux: upgrade 3.4 -> 3.5

ChangeLog: https://github.com/SELinuxProject/selinux/releases/tag/3.5 Signed-off-by: Yi Zhao --- recipes-security/selinux/selinux_common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/selinux/selinux_common.inc b/recipes-security/selinux

[yocto] [meta-selinux][PATCH 04/17] libsepol: upgrade 3.4 -> 3.5

License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by: Yi Zhao --- ...idation-of-user-declarations-in-modu.patch | 80 --- .../{libsepol_3.4.bb => libsepol_3.5.bb} | 4 +- 2 files changed, 1 insertion(+), 83 deleti

[yocto] [meta-selinux][PATCH 02/17] refpolicy: update to latest git rev

Drop 0003-refpolicy-minimum-make-dbus-module-optional.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao --- .../refpolicy/refpolicy-minimum_git.bb| 1 - ...cy-minimum-make-dbus-module-optional.patch | 36 --- recipes-security/refpolicy/refpolicy_git.inc

[yocto] [meta-selinux][PATCH 01/17] gitignore: add it

Signed-off-by: Yi Zhao --- .gitignore | 7 +++ 1 file changed, 7 insertions(+) create mode 100644 .gitignore diff --git a/.gitignore b/.gitignore new file mode 100644 index 000..c01df45 --- /dev/null +++ b/.gitignore @@ -0,0 +1,7 @@ +*.pyc +*.pyo +/*.patch +*.swp +*.orig +*.rej

[yocto] [meta-selinux][PATCH 1/2] setools: upgrade 4.4.0 -> 4.4.1

Changelog: https://github.com/SELinuxProject/setools/releases/tag/4.4.1 License-Update: Refine COPYING text. No license changes.[1] [1] https://github.com/SELinuxProject/setools/commit/fff1906ff436835108b62bf46616e19705183dfb Signed-off-by: Yi Zhao --- .../setools/{setools_4.4.0.bb

[yocto] [meta-selinux][PATCH 2/2] linux-yocto: drop version from bbappend

Make the bbappend available for 5.x and 6.x kernels. Signed-off-by: Yi Zhao --- .../linux/{linux-yocto_5.%.bbappend => linux-yocto_%.bbappend}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-kernel/linux/{linux-yocto_5.%.bbappend => linux-yocto_%.bbappend} (100%)

[yocto] [meta-selinux][PATCH] layer.conf: update LAYERSERIES_COMPAT for mickledore

Signed-off-by: Yi Zhao --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index 5673b73..8bdc3de 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -17,7 +17,7 @@ BBFILE_PRIORITY_selinux = "5" # cause compatibil

[yocto] [meta-selinux][PATCH 3/4] libsepol: fix build failure for refpolicy-mls

/qemux86_64-poky-linux/refpolicy-mls/2.20220520+gitAUTOINC+f311d401cd-r0/recipe-sysroot-native/usr/bin/semodule_package: Error while reading policy module from tmp/xserver.mod | make: *** [Rules.modular:98: xserver.pp] Error 1 Signed-off-by: Yi Zhao --- ...idation-of-user-declarations-in-modu.patch

[yocto] [meta-selinux][PATCH 1/4] SELinux-FAQ: remove references to poky-selinux distro

Update SELinux-FAQ as the poky-selinux distro has been removed for a long time. Signed-off-by: Yi Zhao --- SELinux-FAQ | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/SELinux-FAQ b/SELinux-FAQ index 8f56b2b..2ae6649 100644 --- a/SELinux-FAQ +++ b/SELinux-FAQ @@ -47,7

[yocto] [meta-selinux][PATCH 2/4] base-files: set correct label for /var/volatile

By default /var/volatile will be mounted with tmpfs_t instead of var_t label, which will cause us to have to add some extra rules to eliminate avc denials of some services. Set rootcontext for /var/volatile in fstab to make sure it is mounted with correct label. Signed-off-by: Yi Zhao

[yocto] [meta-cgl][PATCH 1/2] layer.conf: add langdale to LAYERSERIES_COMPAT

Signed-off-by: Yi Zhao --- meta-cgl-common/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-cgl-common/conf/layer.conf b/meta-cgl-common/conf/layer.conf index 2e21879..865ed9f 100644 --- a/meta-cgl-common/conf/layer.conf +++ b/meta-cgl-common/conf

[yocto] [meta-cgl][PATCH 2/2] resource-agents: set correct path of rm command in ldirectord.service

Fix buildpaths warning: WARNING: resource-agents-4.5.0-r0 do_package_qa: QA Issue: File /lib/systemd/system/ldirectord.service in package ldirectord contains reference to TMPDIR [buildpaths] Signed-off-by: Yi Zhao --- ...ce.in-set-correct-path-of-rm-command.patch | 28

[yocto] [meta-selinux][PATCH] layer.conf: add langdale to LAYERSERIES_COMPAT

Signed-off-by: Yi Zhao --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index d6f83c9..5673b73 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -17,7 +17,7 @@ BBFILE_PRIORITY_selinux = "5" # cause compatibil

[yocto] [meta-selinux][PATCH 16/16] setools: fix buildpaths issue

Fixes: QA Issue: File /usr/src/debug/setools/4.4.0-r0/setools/policyrep.c in package setools-src contains reference to TMPDIR [buildpaths] Signed-off-by: Yi Zhao --- recipes-security/setools/setools_4.4.0.bb | 33 --- 1 file changed, 17 insertions(+), 16 deletions(-) diff

[yocto] [meta-selinux][PATCH 15/16] semodule-utils: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- .../{semodule-utils_3.3.bb => semodule-utils_3.4.bb} | 11 --- 1 file changed, 4 insertions(+), 7 deletions(-) rename recipes-security/selinux/{semodule-utils_3.3.bb => semodule-utils_3.4.bb} (70%) diff --git a/recipes-security/selinux/semodule-utils_

[yocto] [meta-selinux][PATCH 14/16] selinux-sandbox: upgrade 3.3 -> 3.4

* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 49 +++ .../selinux-sandbox/sandbox-de-bashify.patch | 6 +-- ...-sandbox_3.3.bb => selinux-sandbox_3.4.bb} | 8 +-- 3 files changed,

[yocto] [meta-selinux][PATCH 12/16] selinux-dbus: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- .../selinux/{selinux-dbus_3.3.bb => selinux-dbus_3.4.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/selinux/{selinux-dbus_3.3.bb => selinux-dbus_3.4.bb} (89%) diff --git a/recipes-security/selinux/selinux-dbus_3.3

[yocto] [meta-selinux][PATCH 13/16] selinux-gui: upgrade 3.3 -> 3.4

Backport a patch to fix chcat runtime error. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 199 ++ ...{selinux-gui_3.3.bb => selinux-gui_3.4.bb} | 5 +- 2 files changed, 203 insertions(+), 1 deletion(-) create mode 100644 recipes-security/seli

[yocto] [meta-selinux][PATCH 11/16] selinux-python: upgrade 3.3 -> 3.4

* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by: Yi Zhao --- ...andle-unsupported-languages-properly.patch | 173 ++ .../fix-sepolicy-install-path.patch | 4 +- ...ux-python_3.3.bb => selinux-python_3.4.bb} | 51 +++--- 3 files chan

[yocto] [meta-selinux][PATCH 10/16] restorecond: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- .../selinux/{restorecond_3.3.bb => restorecond_3.4.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename recipes-security/selinux/{restorecond_3.3.bb => restorecond_3.4.bb} (86%) diff --git a/recipes-security/selinux/restorecond_3.3

[yocto] [meta-selinux][PATCH 09/16] mcstrans: upgrade 3.3 -> 3.4

Refresh patches. Signed-off-by: Yi Zhao --- .../selinux/mcstrans/mcstrans-de-bashify.patch | 6 +++--- .../mcstrans/mcstrans-fix-the-init-script.patch | 4 ++-- .../selinux/{mcstrans_3.3.bb => mcstrans_3.4.bb} | 12 ++-- 3 files changed, 11 insertions(+), 11 deleti

[yocto] [meta-selinux][PATCH 08/16] policycoreutils: upgrade 3.3 -> 3.4

Refresh patch. Signed-off-by: Yi Zhao --- .../policycoreutils-fixfiles-de-bashify.patch | 14 ++-- ...oreutils_3.3.bb => policycoreutils_3.4.bb} | 72 +-- 2 files changed, 43 insertions(+), 43 deletions(-) rename recipes-security/selinux/{policycoreutils_3.3

[yocto] [meta-selinux][PATCH 07/16] secilc: upgrade 3.3 -> 3.4

Use precise license BSD-2-Clause instead of license BSD. Signed-off-by: Yi Zhao --- recipes-security/selinux/{secilc_3.3.bb => secilc_3.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-security/selinux/{secilc_3.3.bb => secilc_3.4.bb} (85%) diff --git a/r

[yocto] [meta-selinux][PATCH 06/16] checkpolicy: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- .../selinux/{checkpolicy_3.3.bb => checkpolicy_3.4.bb} | 5 + 1 file changed, 1 insertion(+), 4 deletions(-) rename recipes-security/selinux/{checkpolicy_3.3.bb => checkpolicy_3.4.bb} (84%) diff --git a/recipes-security/selinux/checkpolicy_3.3

[yocto] [meta-selinux][PATCH 05/16] libsemanage: upgrade 3.3 -> 3.4

Refresh patches. Signed-off-by: Yi Zhao --- .../libsemanage-Fix-execve-segfaults-on-Ubuntu.patch | 10 +- .../libsemanage-allow-to-disable-audit-support.patch | 8 ...bsemanage-disable-expand-check-on-policy-load.patch | 8 .../selinux/{libsemanage_3.3.bb

[yocto] [meta-selinux][PATCH 03/16] libselinux: upgrade 3.3 -> 3.4

Use libpcre2 instead of libpcre. Signed-off-by: Yi Zhao --- .../selinux/{libselinux_3.3.bb => libselinux_3.4.bb} | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) rename recipes-security/selinux/{libselinux_3.3.bb => libselinux_3.4.bb} (77%) diff --git a/recipes-se

[yocto] [meta-selinux][PATCH 04/16] libselinux-python: upgrade 3.3 -> 3.4

* Use libpcre2 instead of libpcre. * Refresh patches. Signed-off-by: Yi Zhao --- ...linux-python_3.3.bb => libselinux-python_3.4.bb} | 13 +++-- ...ix-python-modules-install-path-for-multili.patch | 8 ...PYCEXT-and-rely-on-the-installed-file-nam.patch} | 8 3 fi

[yocto] [meta-selinux][PATCH 02/16] libsepol: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- .../selinux/{libsepol_3.3.bb => libsepol_3.4.bb}| 6 +- 1 file changed, 1 insertion(+), 5 deletions(-) rename recipes-security/selinux/{libsepol_3.3.bb => libsepol_3.4.bb} (80%) diff --git a/recipes-security/selinux/libsepol_3.3.bb b/recipes-se

[yocto] [meta-selinux][PATCH 01/16] selinux: upgrade 3.3 -> 3.4

Signed-off-by: Yi Zhao --- recipes-security/selinux/selinux_common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/selinux/selinux_common.inc b/recipes-security/selinux/selinux_common.inc index 8bdf8ad..86c748f 100644 --- a/recipes-security/selinux

[yocto] [meta-security][PATCH] aide: fix typo

Fix typo: RDPENDS_${PN} -> RDEPENDS:${PN} Signed-off-by: Yi Zhao --- recipes-ids/aide/aide_0.17.4.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb b/recipes-ids/aide/aide_0.17.4.bb index 6bc2bfe..ebd6ac3 100644 --- a/recipes-ids/a

[yocto] [meta-selinux][master][kirkstone][PATCH 1/2] refpolicy: backport patches to fix policy issues for systemd 250

-transition-for-systemd-networkd-run.patch systemd-add-missing-file-context-for-run-systemd-net.patch systemd-add-file-contexts-for-systemd-network-genera.patch systemd-udev-allow-udev-to-read-systemd-networkd-run.patch Signed-off-by: Yi Zhao --- ...emd-resolved-is-linked-to-libselinux.patch | 33

[yocto] [meta-selinux][master][kirkstone][PATCH 2/2] refpolicy: add file context for findfs alternative

Add file context for findfs alternative which is provided by util-linux. Signed-off-by: Yi Zhao --- ...s-apply-policy-to-findfs-alternative.patch | 29 +++ .../refpolicy/refpolicy_common.inc| 1 + 2 files changed, 30 insertions(+) create mode 100644 recipes

[yocto] [meta-selinux][PATCH] selinux-python: add RDEPENDES on python3-multiprocessing

Add RDEPENDS on python3-multiprocessing for selinux-python-sepolicy to fix runtime error: $ sepolicy Traceback (most recent call last): File "/usr/bin/sepolicy", line 28, in from multiprocessing import Pool ModuleNotFoundError: No module named 'multiprocessing' Signed-off-b

[yocto] [meta-security][PATCH] samhain: upgrade 4.4.3 -> 4.4.6

Signed-off-by: Yi Zhao --- recipes-ids/samhain/samhain.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-ids/samhain/samhain.inc b/recipes-ids/samhain/samhain.inc index 97f5f2d..077e118 100644 --- a/recipes-ids/samhain/samhain.inc +++ b/recipes-ids/samhain

[yocto] [meta-selinux][[RESEND]PATCH 3/4] selinux: upgrade 3.2 -> 3.3

Signed-off-by: Yi Zhao --- ...{checkpolicy_3.2.bb => checkpolicy_3.3.bb} | 0 ...python_3.2.bb => libselinux-python_3.3.bb} | 0 .../{libselinux_3.2.bb => libselinux_3.3.bb} | 0 ...{libsemanage_3.2.bb => libsemanage_3.3.bb} | 0 .../selinux/libsepol/CVE-2021-36084.pat

[yocto] [meta-selinux][RESEND][PATCH 2/4] selinux-python: add RDEPENDES on audit-python

File "/usr/lib/python3.9/site-packages/seobject.py", line 2481, in __add self.mylog.log_change("resrc=fcontext op=add %s ftype=%s tcontext=%s:%s:%s:%s" % (audit.audit_encode_nv_string("tglob", target, 0), ftype_to_audit[ftype],) NameError: name 'audi

[yocto] [meta-selinux][RESEND][PATCH 1/4] selinux: move selinux scripts to selinux-scripts

Signed-off-by: Yi Zhao --- .../selinux-autorelabel/selinux-autorelabel.service | 0 .../selinux-autorelabel/selinux-autorelabel.sh| 0 .../{selinux => selinux-scripts}/selinux-autorelabel_0.1.bb | 0 .../selinux-init/selinux-init.serv

[yocto] [meta-cgl][PATCH 2/3] ocfs2-tools: add UPSTREAM_CHECK_GITTAGREGEX

-tools INFO: Current version: 1.8.6 INFO: Latest version: 1.8.7 INFO: Latest version's commit: 80a60d697d9052d3f196a932df3d1fb5f0df52d6 Signed-off-by: Yi Zhao --- meta-cgl-common/recipes-cgl/ocfs2-tools/ocfs2-tools_1.8.6.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-cgl-common

[yocto] [meta-cgl][PATCH 3/3] cluster-glue: add UPSTREAM_CHECK_GITTAGREGEX

cluster-glue INFO: Current version: 1.0.12 INFO: Latest version: 1.0.12 INFO: Latest version's commit: 1bc77825c0cfb0c80f9c82a061af7ede68676cb4 Signed-off-by: Yi Zhao --- meta-cgl-common/recipes-cgl/cluster-glue/cluster-glue_1.0.12.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-cgl

[yocto] [meta-cgl][PATCH 1/3] resource-agents: add UPSTREAM_CHECK_GITTAGREGEX

resource-agents INFO: Current version: 4.5.0 INFO: Latest version: 4.10.0 INFO: Latest version's commit: fd0720f73a06042ad0a5475a3398096b2912cf5f Signed-off-by: Yi Zhao --- .../cluster-resource-agents/resource-agents_4.5.0.bb| 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta

[yocto] [meta-selinux][PATCH 3/3] selinux: upgrade 3.2 -> 3.3

Drop backport CVE patches. Signed-off-by: Yi Zhao --- ...{checkpolicy_3.2.bb => checkpolicy_3.3.bb} | 0 ...python_3.2.bb => libselinux-python_3.3.bb} | 0 .../{libselinux_3.2.bb => libselinux_3.3.bb} | 0 ...{libsemanage_3.2.bb => libsemanage_3.3.bb} | 0 .../selinux/libse

[yocto] [meta-selinux][PATCH 1/3] selinux-python: add RDEPENDES on audit-python

File "/usr/lib/python3.9/site-packages/seobject.py", line 2481, in __add self.mylog.log_change("resrc=fcontext op=add %s ftype=%s tcontext=%s:%s:%s:%s" % (audit.audit_encode_nv_string("tglob", target, 0), ftype_to_audit[ftype],) NameError: name 'audi

[yocto] [meta-selinux][PATCH 2/3] selinux: move selinux scripts to selinux-scripts

There are too many recipes in recipes-security/selinux. Keep the selinux userspace recipes and move selinux scripts to selinux-scripts directory to make the directory hierarchy clearer. Signed-off-by: Yi Zhao --- .../selinux-autorelabel/selinux-autorelabel.service | 0 .../selinux

[yocto] [meta-security][PATCH 2/2] meta-parsec/README.md: fix for append operator combined with +=

Signed-off-by: Yi Zhao --- meta-parsec/README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/meta-parsec/README.md b/meta-parsec/README.md index c5635d3..bb4c2b9 100644 --- a/meta-parsec/README.md +++ b/meta-parsec/README.md @@ -80,7 +80,7 @@ Manual testing

[yocto] [meta-security][PATCH 1/2] openssl-tpm-engine: fix warning for append operator combined with +=

Fixes: WARNING: openssl-tpm-engine_0.5.0.bb: CFLAGS:append += is not a recommended operator combination, please replace it. Signed-off-by: Yi Zhao --- .../openssl-tpm-engine/openssl-tpm-engine_0.5.0.bb| 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta-tpm

[yocto] [meta-cgl][PATCH] recipes: update SRC_URI branch and protocols

Update SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls. Signed-off-by: Yi Zhao --- meta-cgl-common/recipes-cgl/cluster-glue/cluster-glue_1.0.12.bb | 2 +- .../cluster-resource-agents/resource-agents_4.5.0.bb| 2 +- meta

[yocto] [meta-selinux][PATCH 1/2] recipes: update SRC_URI branch and protocols

Update SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls. Signed-off-by: Yi Zhao --- recipes-security/refpolicy/refpolicy_git.inc | 2 +- recipes-security/selinux/selinux_common.inc | 2 +- recipes-security/setools/setools_4.4.0.bb

[yocto] [meta-selinux][PATCH 2/2] bind: remove volatile file

This file is not needed anymore as bind daemon will create them by itself. Signed-off-by: Yi Zhao --- recipes-connectivity/bind/bind_selinux.inc| 7 --- recipes-connectivity/bind/files/volatiles.04_bind | 4 2 files changed, 11 deletions(-) delete mode 100644 recipes

[yocto] [meta-selinux][PATCH] sysvinit: sync bbappend to 3.0

The sysvinit in oe-core has been upgraded to 3.0. Update the bbappend to adapt it. Signed-off-by: Yi Zhao --- .../{sysvinit_2.9%.bbappend => sysvinit_3.%.bbappend} | 0 recipes-core/sysvinit/sysvinit_selinux.inc| 4 2 files changed, 4 deletions(-) ren

[yocto] [meta-cgl][PATCH 2/2] crmsh: add UPSTREAM_CHECK_GITTAGREGEX

: Current version: 4.3.1 INFO: Latest version: 4.3.1 INFO: Latest version's commit: 00ec69054edecd068deda54c6184c0385d90ebd2 Signed-off-by: Yi Zhao --- meta-cgl-common/recipes-cgl/crmsh/crmsh_4.3.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-cgl-common/recipes-cgl/crmsh

[yocto] [meta-cgl][PATCH 1/2] crmsh: fix deprecation on collections.MutableSet

ctions.MutableSet): AttributeError: module 'collections' has no attribute 'MutableSet' Signed-off-by: Yi Zhao --- ...x-deprecation-on-collections.Mutable.patch | 52 +++ .../recipes-cgl/crmsh/crmsh_4.3.1.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 me

[yocto] [meta-cgl][PATCH] libsocket6-perl: inherit autotools-brokensep

-perl/0.29-r2/temp/run.do_configure.27951: autoreconf: not found libsocket6-perl/0.29-r2/temp/run.do_configure.27951: oefatal: not found Signed-off-by: Yi Zhao --- meta-cgl-common/recipes-perl/perl/libsocket6-perl_0.29.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-cgl

  1   2   3   >