/openbmc/linux/scripts/selinux/ |
H A D | install_policy.sh | 42 mkdir -p /etc/selinux/dummy/policy 43 mkdir -p /etc/selinux/dummy/contexts/files 45 echo "__default__:user_u:s0" > /etc/selinux/dummy/seusers 46 echo "base_r:base_t:s0" > /etc/selinux/dummy/contexts/failsafe_context 47 echo "base_r:base_t:s0 base_r:base_t:s0" > /etc/selinux/dummy/default_contexts 48 cat > /etc/selinux/dummy/contexts/x_contexts <<EOF 55 touch /etc/selinux/dummy/contexts/virtual_domain_context 56 touch /etc/selinux/dummy/contexts/virtual_image_context 58 cp file_contexts /etc/selinux/dummy/contexts/files 59 cp dbus_contexts /etc/selinux/dummy/contexts [all …]
|
/openbmc/linux/security/selinux/ |
H A D | Makefile | 11 obj-$(CONFIG_SECURITY_SELINUX) := selinux.o 13 ccflags-y := -I$(srctree)/security/selinux -I$(srctree)/security/selinux/include 15 selinux-y := avc.o hooks.o selinuxfs.o netlink.o nlmsgtab.o netif.o \ 20 selinux-$(CONFIG_SECURITY_NETWORK_XFRM) += xfrm.o 21 selinux-$(CONFIG_NETLABEL) += netlabel.o 22 selinux-$(CONFIG_SECURITY_INFINIBAND) += ibpkey.o 23 selinux-$(CONFIG_IMA) += ima.o 29 $(addprefix $(obj)/,$(selinux-y)): $(obj)/flask.h 39 $(obj)/flask.h: scripts/selinux/genheaders/genheaders FORCE
|
H A D | Kconfig | 17 This option adds a kernel parameter 'selinux', which allows SELinux 19 functionality can be disabled with selinux=0 on the kernel 38 /sys/fs/selinux/enforce. 46 /sys/fs/selinux/avc/cache_stats, which may be monitored via 57 collisions may be viewed at /sys/fs/selinux/ss/sidtab_hash_stats. If
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-devtools/ltrace/ltrace/ |
H A D | configure-allow-to-disable-selinux-support.patch | 4 Subject: [PATCH] ltrace: allow to enable/disable selinux support 21 -AC_CHECK_HEADERS(selinux/selinux.h) 22 -AC_CHECK_LIB(selinux, security_get_boolean_active) 23 +AC_ARG_ENABLE([selinux], 24 + AS_HELP_STRING([--enable-selinux],[enable SELinux support [default=auto]]), 28 + AC_CHECK_HEADERS(selinux/selinux.h) 29 + AC_CHECK_LIB(selinux, security_get_boolean_active)
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-devtools/android-tools/android-tools/extras/ |
H A D | 0001-ext4_utils-remove-selinux-extensions.patch | 4 Subject: [PATCH] ext4_utils: remove selinux extensions 22 #include <selinux/selinux.h> 23 #include <selinux/label.h> 24 -#include <selinux/android.h> 34 #include <selinux/selinux.h> 35 #include <selinux/label.h> 36 -#include <selinux/android.h>
|
/openbmc/linux/Documentation/admin-guide/LSM/ |
H A D | SELinux.rst | 13 scripts/selinux. Note that this requires the selinux 18 1. Compile the kernel with selinux enabled. 22 you are, reboot with selinux disabled 26 cd scripts/selinux 30 kernel, with a single selinux user, role, and type. 32 ``dummy`` in ``/etc/selinux/config``, install the compiled policy
|
/openbmc/linux/tools/perf/Documentation/ |
H A D | security.txt | 15 1. Download selinux-policy SRPM package (e.g. selinux-policy-3.14.4-48.fc31.src.rpm on FC31) 18 # rpm -Uhv selinux-policy-3.14.4-48.fc31.src.rpm 22 # rpmbuild -bp selinux-policy.spec 24 3. Place patch below at rpmbuild/BUILD/selinux-policy-b86eaaf4dbcf2d51dd4432df7185c0eaf3cbcc02 27 # patch -p1 < selinux-policy-perf-events-perfmon.patch 30 # cat selinux-policy-perf-events-perfmon.patch 71 # rpmbuild --noclean --noprep -ba selinux-policy.spec 79 -rw-r--r--. 1 root root 112K Mar 20 12:16 selinux-policy-3.14.4-48.fc31.noarch.rpm 80 -rw-r--r--. 1 root root 1.2M Mar 20 12:17 selinux-policy-devel-3.14.4-48.fc31.noarch.rpm 81 -rw-r--r--. 1 root root 2.3M Mar 20 12:17 selinux-policy-doc-3.14.4-48.fc31.noarch.rpm [all …]
|
/openbmc/openbmc/meta-openembedded/meta-webserver/recipes-httpd/apache2/apache2/ |
H A D | 0007-apache2-allow-to-disable-selinux-support.patch | 4 Subject: [PATCH] apache2: allow to disable selinux support 21 -AC_CHECK_LIB(selinux, is_selinux_enabled, [ 26 +AC_ARG_ENABLE(selinux,APACHE_HELP_STRING(--enable-selinux,Enable SELinux support [default=auto]), 30 + AC_CHECK_LIB(selinux, is_selinux_enabled, [
|
H A D | 0004-apache2-log-the-SELinux-context-at-startup.patch | 24 +AC_CHECK_LIB(selinux, is_selinux_enabled, [ 41 +#include <selinux/selinux.h>
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-support/augeas/ |
H A D | augeas_1.12.0.bb | 32 PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)}" 33 PACKAGECONFIG[selinux] = "--with-selinux,--without-selinux,libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-security/bubblewrap/ |
H A D | bubblewrap_0.10.0.bb | 15 PACKAGECONFIG ?= "${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)}" 17 PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux,libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-core/uutils-coreutils/ |
H A D | uutils-coreutils_0.0.28.bb | 24 PACKAGECONFIG ?= "${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)}" 26 PACKAGECONFIG[selinux] = "--with-selinux,--without-selinux,libselinux" 29 CARGO_BUILD_FLAGS += "${@bb.utils.contains('PACKAGECONFIG', 'selinux', '--features feat_selinux', '… 31 DEPENDS += "${@bb.utils.contains('PACKAGECONFIG', 'selinux', 'clang-native libselinux-native', '', … 47 bindir_progs += "${@bb.utils.contains('PACKAGECONFIG', 'selinux', 'chcon runcon', '', d)}"
|
/openbmc/openbmc/meta-security/meta-tpm/recipes-tpm/swtpm/ |
H A D | swtpm_0.8.2.bb | 22 PACKAGECONFIG += "${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)}" 30 PACKAGECONFIG[selinux] = "--with-selinux, --without-selinux, libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-devtools/ltrace/ |
H A D | ltrace_git.bb | 18 file://configure-allow-to-disable-selinux-support.patch \ 38 PACKAGECONFIG ?= "${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)}" 40 PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux,libselinux,libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-core/dbus/ |
H A D | dbus-broker_36.bb | 9 ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'audit (>= 3.0)', '', d)} \ 10 ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'libselinux (>= 3.2)', '', d)} \ 23 EXTRA_OEMESON += "-Daudit=${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'true', 'false', d)}" 24 EXTRA_OEMESON += "-Dselinux=${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'true', 'false', d)}"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-devtools/squashfs-tools-ng/ |
H A D | squashfs-tools-ng_1.3.2.bb | 21 PACKAGECONFIG ??= "gzip xz lzo lz4 zstd ${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)}" 27 PACKAGECONFIG[selinux] = "--with-selinux,--without-selinux,libselinux"
|
/openbmc/openbmc/meta-security/recipes-security/Firejail/ |
H A D | firejail_0.9.72.bb | 27 PACKAGECONFIG += "${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)}" 31 PACKAGECONFIG[selinux] = "--enable-selinux, --disable-selinux, libselinux"
|
/openbmc/openbmc/poky/meta/recipes-extended/at/ |
H A D | at_3.2.5.bb | 12 ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)} \ 15 PACKAGECONFIG[selinux] = "--with-selinux,--without-selinux,libselinux,"
|
/openbmc/openbmc/meta-security/recipes-ids/aide/ |
H A D | aide_0.18.8.bb | 20 ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux audit', '', d)} \ 23 PACKAGECONFIG[selinux] = "--with-selinux, --without-selinux, libselinux, libselinux"
|
/openbmc/linux/Documentation/ABI/removed/ |
H A D | sysfs-selinux-disable | 1 What: /sys/fs/selinux/disable 4 Contact: selinux@vger.kernel.org 14 The preferred method of disabling SELinux is via the "selinux=0" boot 28 More information on /sys/fs/selinux/disable can be found under the
|
/openbmc/openbmc/meta-security/recipes-security/redhat-security/ |
H A D | redhat-security_1.0.bb | 18 file://selinux-check-devices.sh \ 19 file://selinux-ls-unconfined.sh" 37 install -m 0755 ${S}/selinux-check-devices.sh ${D}${bindir} 38 install -m 0755 ${S}/selinux-ls-unconfined.sh ${D}${bindir}
|
/openbmc/openbmc/poky/meta/recipes-extended/findutils/ |
H A D | findutils_4.10.0.bb | 11 PACKAGECONFIG[selinux] = "--with-selinux,--without-selinux,libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-extended/smartmontools/ |
H A D | smartmontools_7.4.bb | 22 PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'libcap-ng selinux', d)}" 24 PACKAGECONFIG[selinux] = "--with-selinux=yes,--with-selinux=no,libselinux"
|
/openbmc/openbmc/meta-openembedded/meta-oe/recipes-support/lvm2/ |
H A D | lvm2.inc | 31 ${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)} \ 43 PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux,libselinux"
|
/openbmc/openbmc/poky/meta/recipes-core/udev/ |
H A D | eudev_3.2.14.bb | 34 ${@bb.utils.filter('DISTRO_FEATURES', 'selinux', d)} \ 41 PACKAGECONFIG[selinux] = "--enable-selinux,--disable-selinux,libselinux"
|