- 31 May, 2023 1 commit
-
-
The CVE product name for selinux-* package is (usually) the selinux (and not our recipe name), so use selinux as the default. See also: http://lists.openembedded.org/pipermail/openembedded-core/2017-July/139897.html "Results from cve-check are not very good at the moment. One of the reasons for this is that component names used in CVE database differ from yocto recipe names. This series fixes several of those name mapping problems by setting the CVE_PRODUCT correctly in the recipes. To check this mapping with after a build, I'm exporting LICENSE and CVE_PRODUCT variables to buildhistory for recipes and packages." Value added is based on: https://nvd.nist.gov/vuln/search/results?results_type=overview&search_type=all&cpe_product=cpe%3A%2F%3Akernel%3Aselinux Signed-off-by:
Sanjay Chitroda <schitrod@cisco.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 01 May, 2023 2 commits
-
-
Yi Zhao authored
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is deprecated and will be rejected in a future kernel release[1]. [1] https://github.com/SELinuxProject/selinux-kernel/wiki/DEPRECATE-checkreqprot Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
ChangeLog: https://github.com/SELinuxProject/setools/releases/tag/4.4.2 Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 27 Mar, 2023 17 commits
-
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. * Refresh patch. * Drop backport patch. * Add dependency python3-setuptools-scm-native to fix build error. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. * Refresh patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
* Add dependency python3-setuptools-scm-native to fix build error. * Refresh patches. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
License-Update: Rename COPYING to LICENSE. No content changes. * Drop backport patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
ChangeLog: https://github.com/SELinuxProject/selinux/releases/tag/3.5 Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Drop 0003-refpolicy-minimum-make-dbus-module-optional.patch as the issue has been fixed upstream. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 06 Mar, 2023 2 commits
-
-
Yi Zhao authored
Make the bbappend available for 5.x and 6.x kernels. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Changelog: https://github.com/SELinuxProject/setools/releases/tag/4.4.1 License-Update: Refine COPYING text. No license changes.[1] [1] https://github.com/SELinuxProject/setools/commit/fff1906ff436835108b62bf46616e19705183dfb Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 17 Jan, 2023 1 commit
-
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 15 Dec, 2022 5 commits
-
-
Mingli Yu authored
Move PACKAGECONFIG setting to oe-core [1] to conform to yocto compliance. [1] https://git.openembedded.org/openembedded-core/commit/?id=d2aa518163a4836eeb5bf8517456790cba382c2e Signed-off-by:
Mingli Yu <mingli.yu@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Mingli Yu authored
Move PACKAGECONFIG setting to oe-core [1] to conform to yocto compliance. [1] https://git.openembedded.org/openembedded-core/commit/?id=fd036af063ef47d8296be909eb5db9bddc05eb6e Signed-off-by:
Mingli Yu <mingli.yu@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Mingli Yu authored
Move PACKAGECONFIG setting to oe-core [1] to conform to yocto compliance. [1] https://git.openembedded.org/openembedded-core/commit/?id=c57cc22fad708ac856ac4ebe0a42042031fbf90b Signed-off-by:
Mingli Yu <mingli.yu@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Mingli Yu authored
Move PACKAGECONFIG setting to oe-core [1] to conform to yocto compliance. [1] https://git.openembedded.org/openembedded-core/commit/?id=067ce90494bc370fc7a271c6a036c414358f0f38 Signed-off-by:
Mingli Yu <mingli.yu@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Mingli Yu authored
Move PACKAGECONFIG setting to oe-core [1] to conform to yocto compliance. [1] https://git.openembedded.org/openembedded-core/commit/?id=5c8e22895709a0ce7ce855468473d9d6d10a1e65 Signed-off-by:
Mingli Yu <mingli.yu@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 23 Nov, 2022 1 commit
-
-
Yi Zhao authored
* Update to latest git rev. * Drop obsolete and useless patches. * Rebase patches. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 07 Nov, 2022 3 commits
-
-
Yi Zhao authored
Backport a patch to fix build failure for refpolicy-mls: | Creating mls xserver.pp policy package | libsepol.validate_user_datum: Invalid user datum | libsepol.validate_datum_array_entries: Invalid datum array entries | libsepol.validate_policydb: Invalid policydb | /buildarea/build/tmp/work/qemux86_64-poky-linux/refpolicy-mls/2.20220520+gitAUTOINC+f311d401cd-r0/recipe-sysroot-native/usr/bin/semodule_package: Error while reading policy module from tmp/xserver.mod | make: *** [Rules.modular:98: xserver.pp] Error 1 Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
By default /var/volatile will be mounted with tmpfs_t instead of var_t label, which will cause us to have to add some extra rules to eliminate avc denials of some services. Set rootcontext for /var/volatile in fstab to make sure it is mounted with correct label. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Update SELinux-FAQ as the poky-selinux distro has been removed for a long time. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 03 Oct, 2022 2 commits
-
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Oleksiy Obitotskyy authored
Recipe have implicit dependency on nativesdk-python, so recipe-sysroot-root populated with python headers. But during build code look for headers into recipe-sysroot. Add python dependency explicitly. Signed-off-by:
Oleksiy Obitotskyy <oobitots@cisco.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
- 28 Aug, 2022 6 commits
-
-
Yi Zhao authored
Fixes: QA Issue: File /usr/src/debug/setools/4.4.0-r0/setools/policyrep.c in package setools-src contains reference to TMPDIR [buildpaths] Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Backport a patch to fix chcat runtime error. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-
Yi Zhao authored
* Backport a patch to fix chcat runtime error. * Refresh patch. Signed-off-by:
Yi Zhao <yi.zhao@windriver.com> Signed-off-by:
Joe MacDonald <joe@deserted.net>
-