mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-22 06:51:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1466 from mjg59/selinux

Browse Source 
Build an selinux-capable image
This commit is contained in:
mjg59 2015-08-14 12:23:13 -07:00
commit dde34d405f
3 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use vendored
View File

@ -3,6 +3,7 @@
app-admin/rsyslog -ssl app-admin/rsyslog -ssl
app-editors/vim minimal app-editors/vim minimal
coreos-base/coreos selinux
dev-lang/python -berkdb gdbm dev-lang/python -berkdb gdbm
dev-libs/dbus-glib tools dev-libs/dbus-glib tools
dev-libs/elfutils -utils dev-libs/elfutils -utils
@ -15,15 +16,18 @@ net-misc/dhcp -server
net-misc/iperf threads net-misc/iperf threads
net-misc/ntp caps net-misc/ntp caps
sys-apps/busybox -pam -selinux sys-apps/busybox -pam -selinux
sys-apps/dbus selinux
sys-apps/smartmontools minimal sys-apps/smartmontools minimal
sys-block/parted device-mapper sys-block/parted device-mapper
sys-fs/lvm2 -lvm1 -readline sys-fs/lvm2 -lvm1 -readline
sys-kernel/coreos-kernel selinux
sys-libs/ncurses minimal sys-libs/ncurses minimal
sys-libs/pam -berkdb sys-libs/pam -berkdb
sys-libs/gdbm berkdb sys-libs/gdbm berkdb
# enable journal gateway and container features, avoid pulling in gnutls # enable journal gateway and container features, avoid pulling in gnutls
sys-apps/systemd audit importd http nat -ssl sys-apps/systemd audit importd http nat -ssl selinux
net-libs/libmicrohttpd -ssl net-libs/libmicrohttpd -ssl
sys-boot/syslinux -custom-cflags sys-boot/syslinux -custom-cflags

4
sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.8.16-r1.ebuild → sdk_container/src/third_party/coreos-overlay/sys-apps/dbus/dbus-1.8.16-r2.ebuild vendored
View File

@ -37,9 +37,7 @@ DEPEND="${CDEPEND}
>=dev-libs/glib-2.24 >=dev-libs/glib-2.24
${PYTHON_DEPS} ${PYTHON_DEPS}
)" )"
RDEPEND="${CDEPEND} RDEPEND="${CDEPEND}"
selinux? ( sec-policy/selinux-dbus )
"
DOC_CONTENTS=" DOC_CONTENTS="
Some applications require a session bus in addition to the system Some applications require a session bus in addition to the system

4
sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 vendored
View File

@ -923,8 +923,8 @@ CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_NETWORK_XFRM=y CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
CONFIG_SECURITY_SELINUX_DISABLE=y CONFIG_SECURITY_SELINUX_DISABLE=n
# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set
CONFIG_CRYPTO_CRC32C_INTEL=m CONFIG_CRYPTO_CRC32C_INTEL=m
CONFIG_CRYPTO_SHA1_SSSE3=m CONFIG_CRYPTO_SHA1_SSSE3=m