Re: [yocto] [meta-fsl-ppc denzil] inetutils_1.8.bbapend: ifconfig -a includes interfaces without an address

2012-10-31 Thread Joe MacDonald
@@ -PR_append_fsl = +${DISTRO}.0 - -inherit update-alternatives - -ALTERNATIVE_NAME_fsl = ifconfig -ALTERNATIVE_LINK_fsl = ${base_sbindir}/ifconfig -ALTERNATIVE_PATH_fsl = ${base_sbindir}/ifconfig.net-tools -ALTERNATIVE_PRIORITY_fsl = 200 - -- Joe MacDonald, Sr. Member of Technical Staff

Re: [yocto] [OE-core] New OE layer index now available

2013-04-01 Thread Joe MacDonald
, for example, since I use two quite regularly and update meta-networking from both. -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [OE-core] New OE layer index now available

2013-04-01 Thread Joe MacDonald
[Re: [OE-core] New OE layer index now available] On 13.04.01 (Mon 12:57) Paul Eggleton wrote: On Monday 01 April 2013 06:47:59 Joe MacDonald wrote: I like it, though I have a couple of questions about the accounts themselves. - Any chance we could have them connected (or use

Re: [yocto] [Meta-security][PATCH v2] snort: add recipe

2013-09-13 Thread Joe MacDonald
\ + + +RRECOMMENDS_${PN} += ${PN}-logrotate +RRECOMMENDS_${PN} += barnyard +RSUGGESTS_${PN}-logrotate += logrotate -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https

[yocto] [meta-security][PATCH 0/2] Bastille updates

2013-09-20 Thread Joe MacDonald
an install issue with Bastille that was simpler and more pervasive, so that's 1/2. 2/2 is the big let's dump lib-perl change. -- -Joe MacDonald. :wq ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

[yocto] [meta-security][PATCH 1/2] Bastille: make questions files writable

2013-09-20 Thread Joe MacDonald
. Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/bastille/bastille_3.2.1.bb |1 + 1 file changed, 1 insertion(+) diff --git a/recipes-security/bastille/bastille_3.2.1.bb b/recipes-security/bastille/bastille_3.2.1.bb index ef697d7..d506399 100644 --- a/recipes-security

[yocto] [meta-security][PATCH 2/2] Bastille: Remove dependency on lib-perl

2013-09-20 Thread Joe MacDonald
entirely since it no longer serves any purpose. Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/bastille/bastille_3.2.1.bb|3 +- ...-lib-remove-dependency-on-lib-perl-module.patch | 495 recipes-security/perl/lib-perl_0.63.bb | 28

[yocto] [meta-selinux][PATCH] documentation: update guidance for runqemu

2013-09-24 Thread Joe MacDonald
Testing SELinux on QEMU occasionally results in OOM conditions during a relabel from time to time. Update the documentation to warn about this and suggest a way to avoid the situation. Signed-off-by: Joe MacDonald j...@deserted.net --- SELinux-FAQ |8 1 file changed, 8 insertions

Re: [yocto] [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

2013-09-26 Thread Joe MacDonald
\ packagegroup-core-selinux \ -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 1/1] openssh: add PACKAGECONFIG data regarding audit

2013-09-27 Thread Joe MacDonald
it, +# uncomment the following. +# +#PACKAGECONFIG += ${@target_selinux(d, 'audit')} + +PACKAGECONFIG[audit] = --with-audit=linux,--without-audit,audit, + -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto

Re: [yocto] [meta-selinux] Add util-linux-agetty to core-image-selinux IMAGE_INSTALL.

2013-09-27 Thread Joe MacDonald
/recipes-security/images/core-image-selinux.bb @@ -6,6 +6,7 @@ LICENSE = MIT IMAGE_INSTALL = \ ${CORE_IMAGE_BASE_INSTALL} \ + util-linux-agetty \ packagegroup-core-basic \ packagegroup-core-selinux \ -- -Joe MacDonald. :wq signature.asc Description: Digital

Re: [yocto] [meta-selinux] Stage SELinux config file in the sysroot.

2013-09-27 Thread Joe MacDonald
} ${SYSROOT_DESTDIR}${sysconfdir} +} -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux] Check for the availability of 'secon' and 'setenforce' in the selinux-init.sh script.

2013-09-27 Thread Joe MacDonald
. -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux] Resend: Install policy headers and include them in the refpolicy dev package.

2013-09-27 Thread Joe MacDonald
}${sysconfdir}/selinux/${POLICY_NAME}/contexts/customizable_types + + # install policy headers + oe_runmake install-headers DESTDIR=${D} } -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto

Re: [yocto] [meta-selinux] Add ${bindir}/sepolgen to system-config-selinux package.

2013-09-27 Thread Joe MacDonald
\ +${datadir}/system-config-selinux/* \ + inherit pythonnative -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux] Updated meta-selinux -- master-next

2013-09-27 Thread Joe MacDonald
Ouyang: refpolicy*: remove old version recipes and patches. - Xin Ouyang: refpolicy*: add new version 2.20130424 - Joe MacDonald: udev/init: work around dev-cache restore problems - Mark Hatle: udev/init: sync to latest poky version - Xin Ouyang: always force to restore file contexts

Re: [yocto] [PATCH 1/1] tar: add acl dependency information

2013-10-02 Thread Joe MacDonald
___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org

[yocto] [meta-selinux] Updated meta-selinux -- master (was: master-next)

2013-10-02 Thread Joe MacDonald
...@twobit.us wrote: On 09/27/2013 03:58 PM, Joe MacDonald wrote: [[yocto] [meta-selinux] Updated meta-selinux -- master-next] On 13.09.19 (Thu 13:41) Mark Hatle wrote: I have updated meta-selinux, and placed the update into the 'master-next' branch. This was locally tested with Poky

Re: [yocto] [Meta-security][PATCH V3 1/3] snort : add recipe

2013-10-15 Thread Joe MacDonald
mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.

2013-10-21 Thread Joe MacDonald
(-) ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org

Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.

2013-10-21 Thread Joe MacDonald
[Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.] On 13.10.21 (Mon 10:57) Joe MacDonald wrote: Thought I'd best (finally) follow up to the list on this. I've been talking to Philip offline. These are in the queue for integration but some surprising things

Re: [yocto] [meta-selinux][PATCH] bzip SELinux policy modules in ${datadir}

2013-10-21 Thread Joe MacDonald
/${POLICY_NAME}/modules/active/`basename $i` fi done -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.

2013-10-22 Thread Joe MacDonald
[Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.] On 13.10.21 (Mon 16:01) Joe MacDonald wrote: [Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python dependency from refpol.] On 13.10.21 (Mon 10:57) Joe MacDonald wrote: Thought I'd best (finally

Re: [yocto] [meta-selinux][PATCH] Add recipe to build the MCS refpolicy.

2013-10-30 Thread Joe MacDonald
+POLICY_UNK_PERMS = allow +POLICY_DIRECT_INITRC = n +POLICY_MONOLITHIC = n +POLICY_CUSTOM_BUILDOPT = +POLICY_QUIET = y + +POLICY_MCS_CATS = 1024 + +include refpolicy_${PV}.inc -- -Joe MacDonald. :wq signature.asc Description: Digital signature

Re: [yocto] [meta-selinux][PATCH 1/4] Move common POLICY_* variables to refpolicy_common.inc

2013-10-30 Thread Joe MacDonald
this as a base for creating a simplified policy. -J. + EXTRA_OEMAKE += NAME=${POLICY_NAME} \ TYPE=${POLICY_TYPE} \ DISTRO=${POLICY_DISTRO} \ -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto

[yocto] [meta-security][PATCH] libseccomp: add latest stable version, add ptest

2013-11-04 Thread Joe MacDonald
A new stable version of libseccomp is available, so update the recipe. At the same time, integrate the ptest support that's currently being discussed on the libseccomp list. Signed-off-by: Joe MacDonald j...@deserted.net --- .../0001-tests-create-install-tests-target.patch | 203

Re: [yocto] [meta-selinux][PATCH 1/4] Move common POLICY_* variables to refpolicy_common.inc

2013-11-06 Thread Joe MacDonald
[Re: [yocto] [meta-selinux][PATCH 1/4] Move common POLICY_* variables to refpolicy_common.inc] On 13.11.06 (Wed 09:03) Philip Tricca wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hey Joe, On 10/30/2013 10:22 AM, Joe MacDonald wrote: [[yocto] [meta-selinux][PATCH 1/4] Move

Re: [yocto] [meta-selinux][PATCH 0/3] Small dependency clean up.

2013-11-06 Thread Joe MacDonald
-selinux-minimal.bb |8 recipes-security/selinux/selinux-config_0.1.bb |8 3 files changed, 8 insertions(+), 15 deletions(-) -- -Joe MacDonald. :wq signature.asc Description: Digital signature

[yocto] [meta-selinux][PATCH 1/2] bzip SELinux policy modules in ${datadir}

2013-12-03 Thread Joe MacDonald
image size of core-image-selinux. This last metric is a bit skewed as the image includes two policies. Still, a reduction in the size of the refpolicy package by 1/2 is significant. Signed-off-by: Philip Tricca fl...@twobit.us Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security

Re: [yocto] [meta-selinux][PATCH] bzip SELinux policy modules in ${datadir}

2013-12-03 Thread Joe MacDonald
(resending, this time including the list ...) [Re: [meta-selinux][PATCH] bzip SELinux policy modules in ${datadir}] On 13.10.21 (Mon 16:15) Joe MacDonald wrote: [[meta-selinux][PATCH] bzip SELinux policy modules in ${datadir}] On 13.10.21 (Mon 18:06) Philip Tricca wrote: The 'semodule

Re: [yocto] [meta-selinux][PATCH v2 0/6] Bump versions to catch up with oe-core master.

2013-12-04 Thread Joe MacDonald
.bbappend create mode 100644 recipes-graphics/mesa/mesa_9.2.2.bbappend delete mode 100644 recipes-support/gnupg/gnupg_2.0.21.bbappend create mode 100644 recipes-support/gnupg/gnupg_2.0.22.bbappend -- -Joe MacDonald. :wq signature.asc Description: Digital signature

Re: [yocto] [meta-selinux][RFC v2] refpolicy: Add generic refpolicy recipe and make policy type configurable.

2013-12-04 Thread Joe MacDonald
=${POLICY_TYPE} ${WORKDIR}/config install -d ${D}/${sysconfdir}/selinux install -m 0644 ${WORKDIR}/config ${D}/${sysconfdir}/selinux/ -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto

Re: [yocto] [meta-selinux][PATCH 0/4] Begin mingrating bbappends to use wildcards in place of version numbers.

2014-02-12 Thread Joe MacDonald
[Re: [yocto] [meta-selinux][PATCH 0/4] Begin mingrating bbappends to use wildcards in place of version numbers.] On 14.02.12 (Wed 09:57) Randy MacLeod wrote: On 14-02-11 09:54 PM, Philip Tricca wrote: On 02/11/2014 08:15 PM, Joe MacDonald wrote: [Re: [yocto] [meta-selinux][PATCH 0/4] Begin

Re: [yocto] [meta-selinux][PATCH 0/1] refpolicy: backport two patches

2014-02-12 Thread Joe MacDonald
. -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 1/1] refpolicy: fix ftpwho install dir

2014-02-12 Thread Joe MacDonald
-dir.patch \ # Specific policy for Poky -- -Joe MacDonald. :wq signature.asc Description: Digital signature ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 0/4] Begin mingrating bbappends to use wildcards in place of version numbers.

2014-02-13 Thread Joe MacDonald
Hey Pascal, [Re: [yocto] [meta-selinux][PATCH 0/4] Begin mingrating bbappends to use wildcards in place of version numbers.] On 14.02.13 (Thu 10:33) Pascal Ouyang wrote: 于 14-2-13 上午8:18, Joe MacDonald 写道: [Re: [yocto] [meta-selinux][PATCH 0/4] Begin mingrating bbappends to use wildcards

Re: [yocto] [meta-selinux][PATCH 1/1] refpolicy: fix real path for su.shadow

2014-02-13 Thread Joe MacDonald
-subs_dist.patch \ file://poky-fc-udevd.patch \ file://poky-fc-rpm.patch \ file://poky-fc-ftpwho-dir.patch \ +file://poky-fc-fix-real-path_su.patch \ # Specific policy for Poky -- -Joe MacDonald. :wq signature.asc Description

[yocto] [meta-selinux][PATCH] refpolicy: add versioned directory to FILESEXTRAPATHS

2014-04-03 Thread Joe MacDonald
${PV} is no longer calculated for non-bb/bbappend files, resulting in a failure to find any patches in refpolicy-2.20130424/. Explicitly set the path name rather than relying on the ${PV} expansion. Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/refpolicy

Re: [yocto] [meta-selinux][PATCH] refpolicy: add versioned directory to FILESEXTRAPATHS

2014-04-03 Thread Joe MacDonald
for it. -J. On Thursday, April 3, 2014 4:18 PM, Joe MacDonald j...@deserted.net wrote: ${PV} is no longer calculated for non-bb/bbappend files, resulting in a failure to find any patches in refpolicy-2.20130424/. Explicitly set the path name rather than relying on the ${PV} expansion

Re: [yocto] [meta-selinux][PATCH] refpolicy: add versioned directory to FILESEXTRAPATHS

2014-04-03 Thread Joe MacDonald
-selinux stuff. Since it's the same content, I'll merge yours. -J. On Thursday, April 3, 2014 4:18 PM, Joe MacDonald j...@deserted.net wrote: ${PV} is no longer calculated for non-bb/bbappend files, resulting in a failure to find any patches in refpolicy-2.20130424/. Explicitly set the path

[yocto] [meta-selinux][PATCH] core-image-selinux: update 'core-basic' packagegroup

2014-04-03 Thread Joe MacDonald
packagegroup-core-basic has been renamed to packagegroup-full-cmdline, update our core-image-selinux. Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/images/core-image-selinux.bb |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/images

Re: [yocto] [PATCH 0/1] Changed refpolicy value FILESEXTRAPATHS_prepend

2014-04-03 Thread Joe MacDonald
/refpolicy_2.20130424.inc |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 1.7.10.4 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] meta-selinux/policycoreutils [PATCH 1/1] Add missing dependencies to semanage

2014-04-03 Thread Joe MacDonald
-ipy \ + python-compression \ + python-xml \ ${BPN}-python \ libselinux-python \ -- 1.8.3.4 -- Listen, get this. Nobody with a good compiler needs to be justified. -- -Joe MacDonald. :wq signature.asc Description: Digital signature

Re: [yocto] [meta-selinux PATCH 0/1] policycoreutils (semanage)

2014-04-03 Thread Joe MacDonald
/selinux/policycoreutils/policycoreutils-semanage-edit-user.patch -- 1.7.3.4 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [PATCH 0/1][meta-selinux][V2] refpolicy: make proftpd be able to work

2014-04-03 Thread Joe MacDonald
-ftpd_t-to-mlsfilewrite.patch | 39 .../refpolicy/refpolicy_2.20130424.inc |1 + 2 files changed, 40 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/ftp-add-ftpd_t-to-mlsfilewrite.patch -- -Joe MacDonald. :wq

Re: [yocto] [meta-selinux][PATCH 0/1] refpolicy: allow sysadm to run rpcbind

2014-04-03 Thread Joe MacDonald
-sysadm-to-run-rpcinfo.patch | 33 .../refpolicy/refpolicy_2.20130424.inc |1 + 2 files changed, 34 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-policy-allow-sysadm-to-run-rpcinfo.patch -- -Joe MacDonald. :wq

Re: [yocto] [meta-selinux][PATCH] policycoreutils: drop the patch for old refpolicy

2014-04-03 Thread Joe MacDonald
-optional.patch \ -- 1.7.9.5 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 1/1] checkpolicy: Don't link against libfl

2014-04-03 Thread Joe MacDonald
-Werror -O2 -pipe + override CFLAGS += -I$(INCLUDEDIR) + +-LDLIBS=-lfl -lselinux $(LIBDIR)/libsepol.a -L$(LIBDIR) ++LDLIBS=-lselinux $(LIBDIR)/libsepol.a -L$(LIBDIR) + + all: dispol dismod + +-- +1.7.9.5 + -- 1.8.1.2 -- -Joe MacDonald. :wq signature.asc Description: Digital

Re: [yocto] [meta-selinux][PATCH 1/1] mesa: add dependency on libselinux-native

2014-04-03 Thread Joe MacDonald
-selinux,--disable-selinux,libselinux libselinux-native, -- 1.7.9.5 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [meta-selinux][PATCH 0/4] add targeted/minimum policy and some updates

2014-04-03 Thread Joe MacDonald
mode 100644 recipes-security/refpolicy/refpolicy-targeted/refpolicy-unconfined_u-default-user.patch create mode 100644 recipes-security/refpolicy/refpolicy-targeted_2.20130424.bb -- -Joe MacDonald. :wq signature.asc Description: Digital signature

Re: [yocto] [meta-selinux][PATCH] audit: Fix lack of a default audit.rules

2014-04-07 Thread Joe MacDonald
/audit.rules + + # Based on the audit.spec Copy default rules into place on new installation + cp ${D}/etc/audit/rules.d/audit.rules ${D}/etc/audit/audit.rules } -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto

Re: [yocto] [meta-selinux][PATCH 0/4] add targeted/minimum policy and some updates

2014-04-24 Thread Joe MacDonald
: 于 14-4-4 下午2:57, Pascal Ouyang 写道: 于 14-4-4 上午3:20, Joe MacDonald 写道: Hey Wenzong, I merged two of these four. [[yocto] [meta-selinux][PATCH 0/4] add targeted/minimum policy and some updates] On 14.03.24 (Mon 21:07) wenzong@windriver.com wrote: From: Wenzong Fan wenzong

Re: [yocto] [meta-selinux][PATCH 0/1] refpolicy: add setrans.conf for mcs/mls policy

2014-04-24 Thread Joe MacDonald
(+) create mode 100644 recipes-security/refpolicy/files/setrans-mcs.conf create mode 100644 recipes-security/refpolicy/files/setrans-mls.conf -- 1.7.9.5 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list

[yocto] [meta-selinux][PATCH] libsemanage: disable expand-check on policy load

2014-05-07 Thread Joe MacDonald
-off-by: Joe MacDonald j...@deserted.net --- ...anage-disable-expand-check-on-policy-load.patch | 32 recipes-security/selinux/libsemanage_2.2.bb|1 + 2 files changed, 33 insertions(+) create mode 100644 recipes-security/selinux/libsemanage/libsemanage-disable

[yocto] [v2][meta-selinux][PATCH 0/8] fix PRINC QA Warning

2014-05-07 Thread Joe MacDonald
releases of the selinux tools, so they're due for an update, which'll make most of these changes simply go away, but I won't have time to look at that for at least a couple of weeks yet. -- -Joe MacDonald. :wq -- ___ yocto mailing list yocto@yoctoproject.org

[yocto] [meta-selinux][PATCH 6/9] libselinux: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/libselinux.inc |2 -- recipes-security/selinux/libselinux_2.2.2.bb |2 +- recipes-security/selinux/libselinux_git.bb |2 +- 3

[yocto] [meta-selinux][PATCH 2/9] libpcre_8.34.bbappend: remove PRINC warning

2014-05-07 Thread Joe MacDonald
clearly an exception case. Obviously this is just a staging activity until the next update when we don't include anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-support/libpcre/libpcre_8.34.bbappend |2 +- 1

[yocto] [meta-selinux][PATCH 4/9] libsepol: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/libsepol.inc|2 -- recipes-security/selinux/libsepol_2.2.bb |2 +- recipes-security/selinux/libsepol_git.bb |2 +- 3 files changed, 2

[yocto] [meta-selinux][PATCH 8/9] refpolicy: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/refpolicy/refpolicy-mcs_2.20130424.bb |2 +- recipes-security/refpolicy/refpolicy-minimum_2.20130424.bb |2 ++ recipes-security/refpolicy

[yocto] [meta-selinux][PATCH 9/9] linux-yocto: remove PRINC warning

2014-05-07 Thread Joe MacDonald
Convert PRINC to PR .= so as to not break package feeds. Next time this won't be necessary at all. Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-kernel/linux/linux-yocto_3.10.bbappend |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-kernel/linux/linux

[yocto] [meta-selinux][PATCH 3/9] sepolgen: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/sepolgen.inc |2 -- recipes-security/selinux/sepolgen_1.2.1.bb |2 +- recipes-security/selinux/sepolgen_git.bb |2 +- 3 files

[yocto] [meta-selinux][PATCH 7/9] checkpolicy: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/checkpolicy.inc|2 -- recipes-security/selinux/checkpolicy_2.2.bb |2 +- recipes-security/selinux/checkpolicy_git.bb |2 +- 3 files

[yocto] [meta-selinux][PATCH 5/9] libsemanage: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/libsemanage.inc|2 -- recipes-security/selinux/libsemanage_2.2.bb |2 +- recipes-security/selinux/libsemanage_git.bb |2 +- 3 files

[yocto] [meta-selinux][PATCH 1/9] policycoreutils: remove PRINC warning

2014-05-07 Thread Joe MacDonald
anything of the sort. Signed-off-by: Hongxu Jia hongxu@windriver.com Signed-off-by: Joe MacDonald j...@deserted.net --- recipes-security/selinux/policycoreutils.inc |2 -- recipes-security/selinux/policycoreutils_2.2.5.bb |2 +- recipes-security/selinux/policycoreutils_git.bb

Re: [yocto] replace udhcpc

2014-05-08 Thread Joe MacDonald
best on Yocto? Replace udhcpc with dhclient? If so, how should that be done? Or can udhcpc be configured to remain in the background and try to get an IP address when network is finally up? Thanks for any help Michael -- -Joe MacDonald. :wq signature.asc Description: Digital

[yocto] [PATCH 9/9] linux-yocto: migrate from 3.10 to 3.14

2014-05-08 Thread Joe MacDonald
The default kernel is now 3.14. Since the removal of PRINC support leaves the 3.10 recipe in a difficult-to-work-with state, now seems like a good time to move to the new kernel. Signed-off-by: Joe MacDonald j...@deserted.net --- .../linux/{linux-yocto_3.10.bbappend = linux-yocto_3.14.bbappend

Re: [yocto] [meta-selinux] build issue

2014-05-08 Thread Joe MacDonald
the wrong sources? regards, Armin -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- Joe MacDonald :wq -- ___ yocto mailing list yocto@yoctoproject.org

Re: [yocto] [meta-selinux][PATCH] initscripts/checkroot.sh: restore file contexts for /run

2014-05-09 Thread Joe MacDonald
test ! -x /sbin/restorecon || /sbin/restorecon -RF /var/volatile/ /var/lib /run EOF + sed -i '/mount -n -o remount,$rootmode/i\test ! -x /sbin/restorecon || /sbin/restorecon -RF /run' \ + ${D}${sysconfdir}/init.d/checkroot.sh } -- 1.7.9.5 -- -Joe MacDonald. :wq

[yocto] [meta-cgl][PATCH 0/2] cosmetic updates

2014-05-28 Thread Joe MacDonald
I'm just taking a look now at meta-cgl and gearing up to do some submissions to it. I've been working from: git://git.enea.com/linux/meta-cgl which hasn't seen much activity recently, but it seems to still be the authoritative source. I apologize if I'm working from an out-of-date tree.

[yocto] [meta-cgl][PATCH 2/2] distro: define a cgl distro type

2014-05-28 Thread Joe MacDonald
A CGL image is different enough from other images that it can sensibly be considered a different DISTRO type. It's been possible thus far to piggy-back on 'poky' but recent changes in the base layer make it a reasonable time to create a full distro for CGL. Signed-off-by: Joe MacDonald j

[yocto] [meta-cgl][PATCH 1/2] doc: update core image name

2014-05-28 Thread Joe MacDonald
The base CGL image is actually named core-image-cgl. Correct the minor typo. Signed-off-by: Joe MacDonald j...@deserted.net --- README |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README b/README index 808c059..fea3e13 100644 --- a/README +++ b/README @@ -87,7 +87,7

Re: [yocto] [meta-cgl][PATCH 0/2] cosmetic updates

2014-05-29 Thread Joe MacDonald
-Original Message- From: Joe MacDonald [mailto:j...@deserted.net] Sent: Thursday, May 29, 2014 5:11 AM To: Valentin Cobelea; Alexandru Vaduva Cc: yocto@yoctoproject.org Subject: [meta-cgl][PATCH 0/2] cosmetic updates I'm just taking a look now at meta-cgl and gearing up to do some submissions

[yocto] [meta-selinux][PATCH] swig: use pkg-config for pcre detection.

2014-07-15 Thread Joe MacDonald
Adapted from the original patch submitted to meta-oe for swig 2.0.12. OE-core commit 5870bd272b0b077d0826fb900b251884c1c05061 sabotaged the binconfig way. Signed-off-by: Koen Kooi koen.k...@linaro.org Signed-off-by: Joe MacDonald joe_macdon...@mentor.com --- Building swig-native has been

Re: [yocto] [meta-selinux][PATCH] swig: use pkg-config for pcre detection.

2014-07-15 Thread Joe MacDonald
[[meta-selinux][PATCH] swig: use pkg-config for pcre detection.] On 14.07.15 (Tue 22:03) Joe MacDonald wrote: Adapted from the original patch submitted to meta-oe for swig 2.0.12. OE-core commit 5870bd272b0b077d0826fb900b251884c1c05061 sabotaged the binconfig way. Signed-off

Re: [yocto] [oe] WIreshark 1.12.x

2014-07-16 Thread Joe MacDonald
-security ? - Armin Hey Armin, tcpdump lives in meta-networking/recipes-support, that seems like it's probably a reasonable location for wireshark too. -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto

Re: [yocto] [OE-core] Carrier Grade layer proposal

2014-07-21 Thread Joe MacDonald
://yoctoproject.org -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- Joe MacDonald :wq -- ___ yocto mailing list yocto@yoctoproject.org https

Re: [yocto] [OE-core] Carrier Grade layer proposal

2014-07-22 Thread Joe MacDonald
). That, and if I've got an idea of where you're going, I'll be happy to take an early look at what you've got in terms of it's CGL-ness and hopefully make the eventual registration (if you go that route) move along quickly. -J. Thanks, Alex -Original Message- From: Joe MacDonald [mailto:j

[yocto] [meta-selinux][PATCH] selinux-userspace: update userspace SRC_URI and checksums

2014-09-15 Thread Joe MacDonald
Trac has been turned off on OSS. Update all SRC_URI links for the userspace components to point at the github project releases. The github releases also have a slightly different directory structure in the tarballs, requiring an update of the checksums as well. Signed-off-by: Joe MacDonald

Re: [yocto] [meta-selinux][PATCH] selinux-userspace: update userspace SRC_URI and checksums

2014-09-17 Thread Joe MacDonald
Hi Pascal, [Re: [yocto] [meta-selinux][PATCH] selinux-userspace: update userspace SRC_URI and checksums] On 14.09.17 (Wed 17:14) Pascal Ouyang wrote: 于 14-9-16 上午3:46, Joe MacDonald 写道: diff --git a/recipes-security/selinux/selinux_20131030.inc b/recipes-security/selinux/selinux_20131030

[yocto] [meta-selinux][PATCH] Globally replace 'base_contains' calls with 'bb.utils.contains'

2014-09-17 Thread Joe MacDonald
and we ought to not use it in OE-Core so we can remove it from base metadata in future. Signed-off-by: Joe MacDonald joe_macdon...@mentor.com --- classes/selinux.bbclass|2 +- recipes-extended/tar/tar_1.27.1.bbappend |2 +- recipes-kernel/linux/linux

[yocto] [meta-selinux] refpolicy update in master-next

2014-09-19 Thread Joe MacDonald
done, though. :-) -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [PATCH][meta-selinux] dhcp: remove the unrecognised without-selinux configuration warning

2014-09-24 Thread Joe MacDonald
:= ${@target_selinux(d, '${THISDIR}/files:')} -- 1.7.10.4 -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

[yocto] [meta-selinux] master-next updated

2014-11-01 Thread Joe MacDonald
in the next couple of days, master-next will become master, we'll create the branch and master-next will again be left to the cobwebs for a little while. Boo! -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list

Re: [yocto] [meta-selinux] all files unlabeled_t when using squashfs

2014-11-05 Thread Joe MacDonald
, josh -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

[yocto] [meta-selinux] master branch updated / dizzy branch created

2014-11-05 Thread Joe MacDonald
stable updates for Yocto 1.7 as required. Please let us know if you see anything unexpected. -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo

[yocto] [meta-selinux][PATCH] checkpolicy: remove link against libfl

2014-11-10 Thread Joe MacDonald
An updated version of the patch to drop linking against libfl was required. Signed-off-by: Joe MacDonald joe_macdon...@mentor.com --- recipes-security/selinux/checkpolicy.inc| 2 +- .../selinux/checkpolicy/checkpolicy-Do-not-link-against-libfl.patch | 6 -- 2

Re: [yocto] [oe] [meta-selinux][PATCH] ustr: Change the SRC_URI to upstream and add a new patch

2014-11-19 Thread Joe MacDonald
-not-defined.patch;patch=2 \ +file://ustr-c99-inline.patch;patch=3 SRC_URI[md5sum] = 93147d9f0c9765d4cd0f04f7e44bdfce SRC_URI[sha256sum] = 3daf6eae9f78de1e872c0b2b83cce35515b94d4bb8a074e48f331fd99e1fc2c4 -- 1.8.3.1 -- -Joe MacDonald. :wq signature.asc Description: Digital

Re: [yocto] Layer model doomed, unless we all work together

2014-11-19 Thread Joe MacDonald
, but if it is, it was absolutely not intentional and I'll see what I can do about recovering a bit of karma by tidying up about the place a bit. :-) -J. Thanks for letting me vent, Philip -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto

Re: [yocto] Layer model doomed, unless we all work together

2014-11-20 Thread Joe MacDonald
Hi Paul, [Re: [yocto] Layer model doomed, unless we all work together] On 14.11.20 (Thu 13:43) Paul Eggleton wrote: On Wednesday 19 November 2014 22:34:41 Joe MacDonald wrote: [[yocto] Layer model doomed, unless we all work together] On 14.11.18 (Tue 16:28) Philip Balister wrote: I see

[yocto] [meta-security][PATCH] libcap-ng: port CVE-2014-3215 patch

2014-11-27 Thread Joe MacDonald
Importing the patch from meta-selinux, which itself was a backport from the upstream source tree. Signed-off-by: Joe MacDonald joe_macdon...@mentor.com --- I mentioned a while back that I had at least one patch in meta-selinux that may apply to meta-security as well. I don't know if you guys

Re: [yocto] [meta-security][PATCH] libcap-ng: port CVE-2014-3215 patch

2014-11-30 Thread Joe MacDonald
of action on this one. :-) -J. - Armin On 11/27/2014 10:49 AM, Joe MacDonald wrote: Importing the patch from meta-selinux, which itself was a backport from the upstream source tree. Signed-off-by: Joe MacDonald joe_macdon...@mentor.com --- I mentioned a while back that I had

Re: [yocto] [meta-security][PATCH] libcap-ng: port CVE-2014-3215 patch

2014-11-30 Thread Joe MacDonald
[Re: [yocto] [meta-security][PATCH] libcap-ng: port CVE-2014-3215 patch] On 14.11.30 (Sun 13:21) akuster808 wrote: On 11/30/2014 11:45 AM, Joe MacDonald wrote: [Re: [yocto] [meta-security][PATCH] libcap-ng: port CVE-2014-3215 patch] On 14.11.29 (Sat 20:51) akuster808 wrote: Joe, I

Re: [yocto] [PATCH 0/2] Add some recipes

2014-12-02 Thread Joe MacDonald
/drbd_8.4.4.bb -- 1.9.1 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto

Re: [yocto] [PATCH 0/2] Add some recipes

2014-12-02 Thread Joe MacDonald
Oop, forgot one thing. [Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:37) Joe MacDonald wrote: [Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:03) Alexandru Vaduva wrote: Hello Bian, Did you know that the multipath tools recipe was also available

Re: [yocto] [PATCH 0/2] Add some recipes

2014-12-02 Thread Joe MacDonald
[Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:49) Bruce Ashfield wrote: On 14-12-02 02:37 PM, Joe MacDonald wrote: [Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:03) Alexandru Vaduva wrote: Hello Bian, Did you know that the multipath tools recipe

Re: [yocto] [PATCH 0/2] Add some recipes

2014-12-02 Thread Joe MacDonald
Ashfield bruce.ashfi...@windriver.com wrote: On 14-12-02 03:17 PM, Joe MacDonald wrote: [Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:49) Bruce Ashfield wrote: On 14-12-02 02:37 PM, Joe MacDonald wrote: [Re: [yocto] [PATCH 0/2] Add some recipes] On 14.12.02 (Tue 14:03

Re: [yocto] [meta-cgl][PATCH] samhain: add new recipe

2014-12-10 Thread Joe MacDonald
DESTDIR=${D} install-program install-man install-data +chmod -R a+r ${D}/${mandir} +install -d ${D}/etc/samhain +install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc +} -- 1.8.4.2 -- -Joe MacDonald. :wq signature.asc Description: Digital signature

Re: [yocto] [oe] meta-selinux

2015-02-11 Thread Joe MacDonald
they are maintaining the repository for it and there are quite a few developers using SELiunx on embedded products in Japan. Dave -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org

Re: [yocto] [oe] meta-selinux

2015-02-11 Thread Joe MacDonald
Technology Centre -- -Joe MacDonald. :wq signature.asc Description: Digital signature -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto] [oe] meta-selinux

2015-02-11 Thread Joe MacDonald
, but we're also not far away from the next one, so I'm almost tempted to wait it out at this point and jump right to the 201503* refpolicy. I'd be interested to hear opinions on that from anyone using meta-selinux and wanting to use the master branch. -- -Joe MacDonald. :wq signature.asc

  1   2   >