Re: [yocto] [meta-selinux][PATCH] policycoreutils: update AUDITH, PAMH

2017-10-10 Thread Mark Hatle
This is incorrect. You are not allowed to dynamically determine capabilities like this. Because if another component changes, the system has no way to determine if this package should also be recompiled. policycoreutils should be using 'PACKAGECONFIG', with an audit and pam option. Then set a

[yocto] [meta-selinux][PATCH] policycoreutils: update AUDITH, PAMH

2017-10-10 Thread wenzong.fan
From: Wenzong Fan Update definition of AUDITH, PAMH according to the upstream changes for Makefiles: commit 89ce96cac6ce5eeed78cb39c58514cd68494d7aa ... -ifeq ($(PAMH), /usr/include/security/pam_appl.h) +ifeq ($(PAMH), y) ... -ifeq ($(AUDITH),