V2:
Fixed path to init program
Fix typo in name
Add kernel config to enable tomoyo
Signed-off-by: Armin Kuster <akus...@mvista.com>
---
recipes-kernel/linux/linux-yocto/tomoyo.cfg | 7 +++++++
recipes-kernel/linux/linux-yocto/tomoyo.scc | 4 ++++
recipes-kernel/linux/linux-yocto_3.14.bbappend | 4 ++++
3 files changed, 15 insertions(+)
create mode 100644 recipes-kernel/linux/linux-yocto/tomoyo.cfg
create mode 100644 recipes-kernel/linux/linux-yocto/tomoyo.scc
create mode 100644 recipes-kernel/linux/linux-yocto_3.14.bbappend
diff --git a/recipes-kernel/linux/linux-yocto/tomoyo.cfg
b/recipes-kernel/linux/linux-yocto/tomoyo.cfg
new file mode 100644
index 0000000..0caccf7
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto/tomoyo.cfg
@@ -0,0 +1,7 @@
+CONFIG_SECURITY_TOMOYO=y
+CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048
+CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024
+CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/sbin/ccs-init"
+CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/sbin/init"
+CONFIG_DEFAULT_SECURITY_TOMOYO=y
+CONFIG_DEFAULT_SECURITY="tomoyo"
diff --git a/recipes-kernel/linux/linux-yocto/tomoyo.scc
b/recipes-kernel/linux/linux-yocto/tomoyo.scc
new file mode 100644
index 0000000..9080934
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto/tomoyo.scc
@@ -0,0 +1,4 @@
+define KFEATURE_DESCRIPTION "Tomoyo Kernel Support"
+define KFEATURE_COMPATIBILITY arch
+
+kconf non-hardware toyomo.cfg
diff --git a/recipes-kernel/linux/linux-yocto_3.14.bbappend
b/recipes-kernel/linux/linux-yocto_3.14.bbappend
new file mode 100644
index 0000000..b46419c
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto_3.14.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
+
+# Tomoyo kernel support
+SRC_URI += "${@base_contains('DISTRO_FEATURES', 'tomoyo', '
file://tomoyo.cfg', '', d)}"
--
1.9.1
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
