fix(yocto/raspberrypi): fix SELinux not enabled in kernel build confi…

…guration
extra2000 · Jun 19, 2023 · c322c23 · c322c23
1 parent 4d38bf6
commit c322c23
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/project/yocto/layers/meta-user/recipes-security/linux-raspberrypi/files/enable-selinux.cfg b/project/yocto/layers/meta-user/recipes-security/linux-raspberrypi/files/enable-selinux.cfg
@@ -0,0 +1,10 @@
+CONFIG_AUDIT=y
+CONFIG_NET=y
+CONFIG_INET=y
+CONFIG_IPV6=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_SELINUX_DEVELOP=y
+CONFIG_SECURITY_SELINUX_AVC_STATS=y
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
diff --git a/...ect/yocto/layers/meta-user/recipes-security/linux-raspberrypi/linux-raspberrypi%.bbappend b/...ect/yocto/layers/meta-user/recipes-security/linux-raspberrypi/linux-raspberrypi%.bbappend
@@ -0,0 +1,5 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
+
+SRC_URI:append = " \
+    ${@bb.utils.contains("DISTRO_FEATURES", "selinux", "file://enable-selinux.cfg", "", d)} \
+"