mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-01-12 03:10:13 +00:00
Code Issues Projects Releases Wiki Activity

linux-yocto/5.0: add apparmor fragments

Browse Source 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Armin Kuster
2019-04-01 08:00:33 -07:00
parent cb412637a2
commit cb6d1c85ee
5 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
recipes-kernel/linux/linux-yocto-5.0/apparmor.cfg Normal file
View File

@@ -0,0 +1,15 @@
CONFIG_AUDIT=y
# CONFIG_NETFILTER_XT_TARGET_AUDIT is not set
CONFIG_SECURITY_NETWORK=y
# CONFIG_SECURITY_NETWORK_XFRM is not set
CONFIG_SECURITY_PATH=y
# CONFIG_SECURITY_SELINUX is not set
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_APPARMOR_HASH=y
CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
# CONFIG_SECURITY_APPARMOR_DEBUG is not set
CONFIG_INTEGRITY_AUDIT=y
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_DEFAULT_SECURITY="apparmor"
CONFIG_AUDIT_GENERIC=y

1
recipes-kernel/linux/linux-yocto-5.0/apparmor_on_boot.cfg Normal file
View File

@@ -0,0 +1 @@
CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1

2
recipes-kernel/linux/linux-yocto-5.0/smack-default-lsm.cfg Normal file
View File

@@ -0,0 +1,2 @@
CONFIG_DEFAULT_SECURITY="smack"
CONFIG_DEFAULT_SECURITY_SMACK=y

8
recipes-kernel/linux/linux-yocto-5.0/smack.cfg Normal file
View File

@@ -0,0 +1,8 @@
CONFIG_IP_NF_SECURITY=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_EXT2_FS_SECURITY=y
CONFIG_EXT3_FS_SECURITY=y
CONFIG_EXT4_FS_SECURITY=y
CONFIG_SECURITY=y
CONFIG_SECURITY_SMACK=y
CONFIG_TMPFS_XATTR=y

11
recipes-kernel/linux/linux-yocto_5.0.%.bbappend Normal file
View File

@@ -0,0 +1,11 @@
FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}-5.0:"
SRC_URI += "\
${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor.cfg', '', d)} \
${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor_on_boot.cfg', '', d)} \
"
SRC_URI += "\
${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack.cfg', '', d)} \
${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack-default-lsm.cfg', '', d)} \
"