[yocto] [meta-selinux][PATCH 1/1] audit: Fixed swig host contamination issue

: Joe Slater --- .../audit/audit/fix-swig-host-contamination.patch | 48 recipes-security/audit/audit_2.1.3.bb |7 ++- recipes-security/audit/audit_2.2.1.bb |6 ++- 3 files changed, 56 insertions(+), 5 deletions(-) create mode 100644

[yocto] [meta-selinux][PATCH 1/1] policycoreutils: fix genhomedircon construction

CQID: 418197 Reference /usr/sbin instead of the directory into which the script is installed on the host. Signed-off-by: Joe Slater --- .../selinux/policycoreutils/scripts_makefile.patch | 26 recipes-security/selinux/policycoreutils_2.1.13.bb |3 +- 2 files changed

[yocto] [PATCH 1/1] tar: add acl dependency information

If acl is a distro feature, we want to depend on it. Note that without the xattrs patch, tar cannot deal with acl information. Signed-off-by: Joe Slater --- recipes-extended/tar/tar_1.26.bbappend | 10 +- 1 files changed, 9 insertions(+), 1 deletions(-) diff --git a/recipes-extended

[yocto] [meta-selinux][PATCH 1/1] openssh: add PACKAGECONFIG data regarding audit

Define audit related parameters, but do not enable audit support by default. Signed-off-by: Joe Slater --- .../openssh/openssh_6.2p2.bbappend | 10 +- 1 files changed, 9 insertions(+), 1 deletions(-) diff --git a/recipes-connectivity/openssh/openssh_6.2p2.bbappend b

[yocto] [meta-selinux PATCH 1/1] policycoreutils: semanage

When modifying an selinux login record, seobject.py, may try to log a value, self.sename, which has been preset to "None" and this will fail. So, we set it to something useful. Signed-off-by: Joe Slater --- .../policycoreutils-semanage-edit-user.patch

[yocto] [meta-selinux PATCH 0/1] policycoreutils (semanage)

Fix a failure to modify records if we want to change the seuser for a login user. Just a log issue. I incremented PR. I think we should either do that are get rid of it. Joe Slater (1): policycoreutils: semanage .../policycoreutils-semanage-edit-user.patch | 21

[yocto] [meta-selinux][PATCH 1/1] mesa: add dependency on libselinux-native

mesa builds a host utility named builtin_compiler, and that needs selinux, too, if --enable-selinux is specfied to configure. Signed-off-by: Joe Slater --- recipes-graphics/mesa/mesa_9.1.6.bbappend |5 + 1 file changed, 5 insertions(+) diff --git a/recipes-graphics/mesa/mesa_9.1.6

[yocto] [meta-selinux][PATCH 1/1] refpolicy: SRCREV_FORMAT needed

Signed-off-by: Joe Slater --- recipes-security/refpolicy/refpolicy_git.inc |1 + 1 file changed, 1 insertion(+) diff --git a/recipes-security/refpolicy/refpolicy_git.inc b/recipes-security/refpolicy/refpolicy_git.inc index 6db4b9e..32b3195 100644 --- a/recipes-security/refpolicy

[yocto] [meta-selinux][PATCH 1/1] refpolicy_git: change SRCREV names

When we define several SRCREV_x variables, it is not safe to make any name a subset of another one because SRCREV_FORMAT may be expanded improperly. This occurs only rarely, but it does happen. Signed-off-by: Joe Slater --- recipes-security/refpolicy/refpolicy_git.inc |6 +++--- 1 file

[yocto] [meta-mingw][PATCH 1/1] i686-mingw32.conf: add provider for libc-initial

Make the preferred provider nativesdk-mingw-w64-runtime. Signed-off-by: Joe Slater --- conf/machine-sdk/i686-mingw32.conf |1 + 1 file changed, 1 insertion(+) diff --git a/conf/machine-sdk/i686-mingw32.conf b/conf/machine-sdk/i686-mingw32.conf index 0bdedaa..db08d84 100644 --- a/conf

[yocto] [meta-cgl][PATCH 1/1] ocfs2-tools: fix some script issues

Add a conditional RDEPENDS for lsbinitscripts which are needed by the o2cb and ofcs2 services and not supplied by systemd. Also, do not look for a redhat-release file in the o2cb and ocfs2 scripts. Just use /etc/init.d/functions if it exists. Signed-off-by: Joe Slater --- .../ocfs2-tools

[yocto] [meta-security][PATCH 1/1] keynote: add dependency on bison-native

bison/yacc is no longer automatically supplied. Signed-off-by: Joe Slater --- recipes-security/keynote/keynote_2.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/keynote/keynote_2.3.bb b/recipes-security/keynote/keynote_2.3.bb index e692485..0300894

[yocto] [meta-selinux][PATCH 1/1] selinux-initsh.inc: provide source for archiver

Also remove never used default assignment to S. Signed-off-by: Joe Slater --- recipes-security/selinux/selinux-initsh.inc |6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/recipes-security/selinux/selinux-initsh.inc b/recipes-security/selinux/selinux-initsh.inc index

[yocto] [meta-selinux][PATCH 1/1] mcstrans: specify SBINDIR

We need SBINDIR to be compatible with the usrmerge distro feature. The update to version 2.8 (commit c55c0aca...) removed the definition, perhaps because the "${D}/" prefix broke the build. Signed-off-by: Joe Slater --- recipes-security/selinux/mcstrans.inc | 3 +++ 1 file changed, 3

[yocto] [meta-cgl][PATCH 1/1] crmsh: and RDEPENDS on bash

Several test scripts need /bin/bash instead of /bin/sh. Signed-off-by: Joe Slater --- meta-cgl-common/recipes-cgl/crmsh/crmsh_3.0.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-cgl-common/recipes-cgl/crmsh/crmsh_3.0.3.bb b/meta-cgl-common/recipes-cgl/crmsh