Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-11-01 Thread Stefano Cappa
Good suggestion, thank you. I enabled some features with menuconfig, but I don't understand how to store the new .config file into my custom layer to apply it automatically at every build. I made many experiments without success. I'm going crazy. Il giorno gio 1 nov 2018 alle ore 13:53 Otavio Sal

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-11-01 Thread Otavio Salvador
On Thu, Nov 1, 2018 at 8:23 AM Stefano Cappa wrote: ... > Do you have other ideas to apply these changes manually, instead on a > custom-layer to try to understand if I made an error in my layer or if is it > something else? A dependency of the settings is likely not satisfied; I usually make u

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-11-01 Thread Stefano Cappa
When I run zcat /proc/config.gz I see that some options aren't applied Some of these aren't enabled: CONFIG_AUDIT=y CONFIG_NETWORK_SECMARK=y CONFIG_EXT2_FS_SECURITY=y CONFIG_EXT3_FS_SECURITY=y CONFIG_EXT4_FS_SECURITY=y CONFIG_JFS_SECURITY=y CONFIG_REISERFS_FS_SECURITY=y CONFIG_JFFS2_FS_SECURITY=y

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-29 Thread Otavio Salvador
On Mon, Oct 29, 2018 at 9:34 AM Stefano Cappa wrote: > Do you know if there is a config property for xattrs in .Cfg file? Not on top of head. -- Otavio Salvador O.S. Systems http://www.ossystems.com.brhttp://code.ossystems.com.br Mobile: +55 (53) 9 9981-7854

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-29 Thread Stefano Cappa
Perfect. Do you know if there is a config property for xattrs in .Cfg file? Il lun 29 ott 2018, 13:27 Otavio Salvador ha scritto: > On Mon, Oct 29, 2018 at 6:59 AM Stefano Cappa > wrote: > > Ok. Yes I created a custom layer with recipes-kernel/linux folders and > inside these files: > ... > >

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-29 Thread Otavio Salvador
On Mon, Oct 29, 2018 at 6:59 AM Stefano Cappa wrote: > Ok. Yes I created a custom layer with recipes-kernel/linux folders and inside > these files: ... > Am I missing something? You are on the right path. I think extended attributes support is also needed but I am not a SE Linux user. -- Otavi

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-29 Thread Stefano Cappa
Ok. Yes I created a custom layer with recipes-kernel/linux folders and inside these files: - linux-imx_4.9.88.bbappend - linux-imx_selinux.inc - linux-imx/selinux.cfg (taken as it is from meta-selinux layer) The content of linux-imx_4.9.88.bbappend is: FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}

Re: [meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-27 Thread Otavio Salvador
On Sun, Oct 21, 2018 at 7:52 AM Stefano Cappa wrote: > I'm on Sumo branch with the latest linux-imx (no -fscl) and I'm using the > official NXP imx6 evk board. > > I'm trying meta-selinux (I'm absolutely a noob with selinux, I'm still > experimenting and studying it :)) but I'm getting this erro

[meta-freescale] Cannot enable selinux with imx6ULL. Why?

2018-10-21 Thread Stefano Cappa
I'm on Sumo branch with the latest linux-imx (no -fscl) and I'm using the official NXP imx6 evk board. I'm trying meta-selinux (I'm absolutely a noob with selinux, I'm still experimenting and studying it :)) but I'm getting this error running "fixfiles -f -F relabel": Cleaning out /tmp fixfil