Skip to content
This repository has been archived by the owner on Sep 18, 2020. It is now read-only.

Update selinux support #3155

Open
wants to merge 42 commits into
base: master
Choose a base branch
from
Open

Update selinux support #3155

wants to merge 42 commits into from

Commits on May 23, 2018

  1. profiles: Move SELinux flags from amd64 to generic 

    From: David Michael <david.michael@coreos.com>
[rebased to latest SELinux ebuilds]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    94b5810 View commit details
    Browse the repository at this point in the history

  2. profiles: Sync SELinux dependencies on arm64 

    From: David Michael <david.michael@coreos.com>
[rebased to latest SELinux ebuilds]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    71eedff View commit details
    Browse the repository at this point in the history

  3. profiles: Set make.defaults POLICY_TYPES to mcs 

    Container Linux only uses the mcs policy type.

Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    53d6b29 View commit details
    Browse the repository at this point in the history

  4. sys-libs/libsemanage: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    920ad0f View commit details
    Browse the repository at this point in the history

  5. sys-libs/libsemanage: Add postinst USE flag 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    cf57ff7 View commit details
    Browse the repository at this point in the history

  6. sys-libs/libsemanage: Permit unknown policy objects 

    We're using a stripped down policy, so we don't care that certain tasks
may refer to policy objects that don't exist. Permit acts that reference
them.

From: Matthew Garrett <mjg59@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    Matthew Garrett authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    9b0be36 View commit details
    Browse the repository at this point in the history

  7. sys-libs/libsemanage: Install configuration file 

    Install selinux to /usr/lib/selinux/ rather than /etc/selinux/ and
/var/lib/selinux in order for Container Linux update to work properly.

From: Matthew Garrett <mjg59@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    Matthew Garrett authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    88091cb View commit details
    Browse the repository at this point in the history

  8. sys-libs/libsemanage: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    d0ce29b View commit details
    Browse the repository at this point in the history

  9. app-admin/setools: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    ca663b4 View commit details
    Browse the repository at this point in the history

  10. app-admin/setools: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    7c4b82c View commit details
    Browse the repository at this point in the history

  11. app-admin/setools: Add networkx USE flag 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    aad6b79 View commit details
    Browse the repository at this point in the history

  12. app-admin/setools: Add python USE flag 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    990d966 View commit details
    Browse the repository at this point in the history

  13. app-admin/setools: Fix detection of development files 

    Fixes detection of development files in the board root.

From: David Michael <david.michael@coreos.com>
[Split off from bigger patch.]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    367490d View commit details
    Browse the repository at this point in the history

  14. sys-apps/policycoreutils: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    8aa8081 View commit details
    Browse the repository at this point in the history

  15. sys-apps/policycoreutils: Add python USE flag 

    From: Matthew Garrett <mjg59@coreos.com>
[Split from big patch and rebased for policycoreutils2.7]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    Matthew Garrett authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    69b6ac2 View commit details
    Browse the repository at this point in the history

  16. sys-apps/policycoreutils: Add extra USE flag 

    From: Michael Marineau <michael.marineau@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @marineam @glevand
    marineam authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    d14ac4d View commit details
    Browse the repository at this point in the history

  17. sys-apps/policycoreutils: Add nls USE flag 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    4b048bb View commit details
    Browse the repository at this point in the history

  18. sys-apps/policycoreutils: Add semodule USE flag 

    Add an semodule USE flag and enable it in the SDK profile to get
semodule-utils into the SDK.

Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    c62687f View commit details
    Browse the repository at this point in the history

  19. sys-apps/policycoreutils: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    0c4da2c View commit details
    Browse the repository at this point in the history

  20. sys-apps/policycoreutils: Fixups for Continar Linux 

    From: Matthew Garrett <mjg59@coreos.com>
[Split from big patch and rebased for policycoreutils2.7]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    Matthew Garrett authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    66ef88e View commit details
    Browse the repository at this point in the history

  21. sys-apps/semodule-utils: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    b23f3d8 View commit details
    Browse the repository at this point in the history

  22. sys-apps/semodule-utils: Enable building on arm64 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    2e5fdaf View commit details
    Browse the repository at this point in the history

  23. sys-apps/semodule-utils: Fix cross compile 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    e76cb07 View commit details
    Browse the repository at this point in the history

  24. sys-apps/checkpolicy: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    fa2a628 View commit details
    Browse the repository at this point in the history

  25. sys-apps/checkpolicy: Fix cross compile 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    792721a View commit details
    Browse the repository at this point in the history

  26. sys-apps/checkpolicy: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    78f307d View commit details
    Browse the repository at this point in the history

  27. eclass/coreos-sec-policy.eclass: New eclass 

    Adds a new eclass coreos-sec-policy.eclass that
handles the Container Linux build specifics.

Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    81ccaed View commit details
    Browse the repository at this point in the history

  28. eclass/selinux-policy-2: Use upstream version 

    Delete this version and use the upstream portage-stable
version.  Local changes for Container Linux are handled
by a new eclass coreos-sec-policy.eclass.

Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    21a3aec View commit details
    Browse the repository at this point in the history

  29. sec-policy/selinux-base: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    a32d510 View commit details
    Browse the repository at this point in the history

  30. sec-policy/selinux-base: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    b0b9dee View commit details
    Browse the repository at this point in the history

  31. sec-policy/selinux-base: Fixups for Container Linux 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    01c5104 View commit details
    Browse the repository at this point in the history

  32. sec-policy/selinux-base-policy: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    53efab6 View commit details
    Browse the repository at this point in the history

  33. sec-policy/selinux-base-policy: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    0f10feb View commit details
    Browse the repository at this point in the history

  34. sec-policy/selinux-base-policy: Fixups for Container Linux 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    cb34167 View commit details
    Browse the repository at this point in the history

  35. sec-policy/selinux-unconfined: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    3c5813c View commit details
    Browse the repository at this point in the history

  36. sec-policy/selinux-unconfined: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    1e226b5 View commit details
    Browse the repository at this point in the history

  37. sec-policy/selinux-unconfined: Fixups for Container Linux 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    bcd532e View commit details
    Browse the repository at this point in the history

  38. sec-policy/selinux-virt: Import latest 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    515e1d8 View commit details
    Browse the repository at this point in the history

  39. sec-policy/selinux-virt: Enable building on arm64 

    From: David Michael <david.michael@coreos.com>
[Rebase to latest]
Signed-off-by: Geoff Levand <geoff@infradead.org>
    @dm0- @glevand
    dm0- authored and glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    74edf38 View commit details
    Browse the repository at this point in the history

  40. sec-policy/selinux-virt: Fixups for Container Linux 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    1f3b9d7 View commit details
    Browse the repository at this point in the history

  41. sys-kernel/bootengine: Update for SELinux labels 

    Signed-off-by: Geoff Levand <geoff@infradead.org>
    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    ba1cdfb View commit details
    Browse the repository at this point in the history

  42. chore(metadata): Regenerate cache

    @glevand
    glevand committed May 23, 2018
    Configuration menu
    Copy the full SHA
    8195b8c View commit details
    Browse the repository at this point in the history