The reference policy package currently pulls in a lot of python stuff that isn't strictly necessary to boot an SELinux system and load a policy. This is caused by the mix of python and C utilities in policycoreutils.
This patch set breaks the policycoreutils recipe up into multiple packages, one for each utility. In this way we can have the refpol etc pull in only the utilities necessary for normal operation. This happens to be only the utilities written in C and thus we can remove python completely in a minimal image. I've attempted to localize these changes as much as possible so changes in this patchset outside of the policycoreutils recipe are few. An example image reicpe is added to demonstrate a minimal image with only the utilities required to load a policy and manipulate the policy store (add / remove policy modules) at runtime. _______________________________________________ yocto mailing list [email protected] https://lists.yoctoproject.org/listinfo/yocto
