[yocto] [meta-selinux][RFC 10/10] e2fsprogs: Add patch to implement simple linked list as cache for existing xattr blocks.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../e2fsprogs/misc-xattr-create-xattr-cache.patch | 217 + .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 218 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-xattr-create-xattr-cache.p

[yocto] [meta-selinux][RFC 09/10] e2fsprogs: Add patch to hold xattr header and block number in a structure for the cache.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../misc-xattr-create-xattr-block-node.patch | 126 + .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 127 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-xattr-create-xattr-block-n

[yocto] [meta-selinux][RFC 08/10] e2fsprogs: Add patch to copy xattr block from source file.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../e2fsprogs/misc-xattr-create-xattr-block.patch | 351 + .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 352 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-xattr-create-xattr-block.p

[yocto] [meta-selinux][RFC 07/10] e2fsprogs: Add xattr security prefix data to lib/ext2fs/ext2_ext_attr.h

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../lib-ext2fs-ext2_ext_attr.h-add-xattr-index.patch | 20 recipes-devtools/e2fsprogs/e2fsprogs_1.42.9.bbappend | 1 + 2 files changed, 21 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/lib-ext2fs-ext2_ext_attr.h-add-

[yocto] [meta-selinux][RFC 06/10] e2fsprogs: Add patch to call xattr copy function in populate_fs.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../misc-create_inode.c-label-fs-objects.patch | 30 ++ .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 31 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-create_inode.c-label-fs-obje

[yocto] [meta-selinux][RFC 05/10] e2fsprogs: Add patch make calls necessary to label file system root and do cleanup.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../misc-mke2fs.c-label-root-dir-and-cleanup.patch | 40 ++ .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 41 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-mke2fs.c-label-root-dir-and-

[yocto] [meta-selinux][RFC 04/10] e2fsprogs: Add patch to build xattr code.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../e2fsprogs/Makefile.in-build-xattr.o.patch | 96 ++ .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 1 + 2 files changed, 97 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/Makefile.in-build-xattr.o.patch

[yocto] [meta-selinux][RFC 03/10] e2fsprogs: Add bbappend and apply initial xattr patch.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- .../e2fsprogs/misc-xattr-copy-xattrs.patch | 69 ++ .../e2fsprogs/e2fsprogs_1.42.9.bbappend| 5 ++ 2 files changed, 74 insertions(+) create mode 100644 recipes-devtools/e2fsprogs/e2fsprogs/misc-xattr-copy-xattrs.patch cr

[yocto] [meta-selinux][RFC 02/10] selinux-image: Add new image class to label the rootfs.

2015-06-06 Thread Philip Tricca
Signed-off-by: Philip Tricca --- classes/selinux-image.bbclass | 8 recipes-security/images/core-image-selinux-minimal.bb | 2 +- recipes-security/images/core-image-selinux.bb | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) create mode 100644 cl

[yocto] [meta-selinux][RFC 01/10] policycoreutils: Add FTS_NOCHDIR flag to fts_open.

2015-06-06 Thread Philip Tricca
This works around a bug in the libc currently in use. FTS functions are supposed to change the current working directory as they walk the file hierarchy. The fts_accpath member of the FTSENT structure relies on this behavior and without it the path is not relative to cwd as expected. Supplying the

[yocto] [meta-selinux][RFC 00/10] Label file system in build.

2015-06-06 Thread Philip Tricca
This is a request for comment (RFC) on some patches to enable labing the root file system of an SELinux image. Having to relabel a system as part of the "first boot" has been a significant limitation so hopefully the maintainers will agree at least that the functionality is needed / useful. Curren