-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 10/22/2013 11:37 AM, Joe MacDonald wrote: > [Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python > dependency from refpol.] On 13.10.21 (Mon 16:01) Joe MacDonald > wrote: > >> [Re: [yocto] [meta-selinux][PATCH 0/5] Resend: Remove python >> dependency from refpol.] On 13.10.21 (Mon 10:57) Joe MacDonald >> wrote: >> >>> Thought I'd best (finally) follow up to the list on this. >>> I've been talking to Philip offline. These are in the queue >>> for integration but some surprising things have cropped up >>> along the way and the integration is being delayed a bit. >>> >>> I'll be grabbing the other meta-selinux update at the same >>> time. >> >> Further to this, I've finished the merge of this batch and the >> two other submissions I've seen for meta-selinux today. I >> haven't yet pushed them to meta-selinux on git.yoctoproject.org. >> I'm going to let it cool off until at least tomorrow since this >> one proved to be much more problematic than I think it should >> have been. In the meantime, I've pushed the pending changes to >> my github project: >> >> https://github.com/joeythesaint/meta-selinux.git >> >> on the contrib/joeythesaint branch. > > Six of the seven commits that were on that branch are now in the > official meta-selinux master branch. The last is the > bzip-compressed policy update. > > Thanks Philip.
Sure thing Joe. Thanks for spending the time to get these integrated. - - Philip > > -J. > >> >> -J. >> >>> >>> -J. >>> >>> [[yocto] [meta-selinux][PATCH 0/5] Resend: Remove python >>> dependency from refpol.] On 13.10.17 (Thu 19:06) Philip Tricca >>> wrote: >>> >>>> This is a resend of an earlier patch set that never made it >>>> to the list AFAIK. >>>> >>>> The reference policy package currently pulls in a lot of >>>> python stuff that isn't strictly necessary to boot an >>>> SELinux system and load a policy. AFAIK this is caused by the >>>> mix of python and C utilities in policycoreutils. >>>> >>>> This patch set breaks the policycoreutils recipe up into >>>> multiple packages, one for each utility. In this way we can >>>> have the refpol etc pull in only the utilities necessary for >>>> normal operation. This happens to be only the utilities >>>> written in C and thus we can remove python completely in a >>>> minimal image. >>>> >>>> I've attempted to localize these changes as much as possible >>>> so this patch set should have minimal impact on recipes >>>> outside of the policycoreutils. An example image reicpe is >>>> added to demonstrate a minimal image with only the utilities >>>> required to load a policy and manipulate the policy store >>>> (add / remove policy modules) at runtime. >>>> >>>> Regards, - Philip >>>> >>>> Philip Tricca (5): Break policycoreutils out into separate >>>> Remove unnecessary RDEPENDS_${BPN}. Remove runtime >>>> dependency on Add packagegroup and image recipe for Add >>>> packagegroup for policycoreutils >>>> >>>> .../images/core-image-selinux-minimal.bb | 15 ++ >>>> .../packagegroups/packagegroup-core-selinux.bb | 4 +- >>>> .../packagegroups/packagegroup-selinux-minimal.bb | 26 >>>> +++ .../packagegroup-selinux-policycoreutils.bb | >>>> 36 ++++ recipes-security/refpolicy/refpolicy_common.inc | >>>> 2 +- recipes-security/selinux/policycoreutils.inc | 179 >>>> +++++++++++++++++-- 6 files changed, 245 insertions(+), 17 >>>> deletions(-) >>>> >>>> _______________________________________________ yocto >>>> mailing list yocto@yoctoproject.org >>>> https://lists.yoctoproject.org/listinfo/yocto >>> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Icedove - http://www.enigmail.net/ iQIcBAEBCgAGBQJSZqzpAAoJEDL3fnXC4dO6Z6UP/0UoTumQK0wIlyk4YviqsTKr E0F62JvgzCgf9BLadGmbBSEvgS9Zg50fGr+wM4p0wc7TW2egNnQrPQRa70Y2ycjL jEQhBRuW6HFTSNZYTsrrt20IjE7nTQEDQnvSZW18lDMKbSyWHdrLGL9lgqWKjiRC mf0g6cyO4CNnhxdYIZvWTNWoDdbDTQRpyzWhO2S4YkM7Vkh7lvg3IPadGwTAd6MM nGS6iLKaaaUcqw/i5axOwd8xH2C0/MGDPPYkRwcxAjU7nuH4uOS5uaq5k0dGiuLF IRp374YwCOypcPtmZT0w3C80CmJSC6e2fxHeH8xQNWBnsFSweG3sT/9DGhVYeZky HuvkFFFKmsbSfZHFuTQsH5AiV3YaHQTOgWCefQ22xCDEB03t52E6IPY0rAzlxXIi apL8fhtHjlQ0GaY5yoV7n6+KyfqlQm7WpHXAqowfWEYS3P/pVPJe4pTq+PrzadF2 o5DpGVR5Du2QzLBsFZetFIrLg3kKYkq9011RHwBFl9frsVxTYAdBm58GvceBJL1K wecuveTH30KhYjiDzMZTNL3Tm/vMJLL/CzIWF5NdrMwCUt8+TwFGJvB7a2QEssS0 14SMdPKjtvbGutlAkOT/9T/1HrpIZhoZtkwEnyKgdXEk469+Vp6aBHjf52JPHyFn 5JJhKda01naDs+KA9G6p =uocy -----END PGP SIGNATURE----- _______________________________________________ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto