From patchwork Tue Sep 15 02:40:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 98255 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DFF7DC88E75 for ; Tue, 15 Sep 2026 02:41:14 +0000 (UTC) Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.14750.1789440070017641988 for ; Mon, 14 Sep 2026 19:41:10 -0700 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [101.95.142.114]) by mtasvr (Coremail) with SMTP id _____wA3GCATsKhqg3wBAA--.2497S3; Tue, 15 Sep 2026 10:40:20 +0800 (CST) Received: from server-7r32.. (unknown [101.95.142.114]) by front01 (Coremail) with SMTP id C6CowABn6WnCr6hqV9kxAA--.38863S2; Tue, 15 Sep 2026 10:38:58 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: joe.macdonald@siemens.com Subject: [meta-selinux][PATCH 1/2] layer.conf: add selinux to DISTRO_FEATURES_FILTER_NATIVE Date: Tue, 15 Sep 2026 10:40:59 +0800 Message-ID: <20260915024100.1955287-1-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-CM-TRANSID: C6CowABn6WnCr6hqV9kxAA--.38863S2 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAgYLCmqn+AUJFAACsq X-CM-DELIVERINFO: =?B?6DZa45MTIGijefgSB8euu+6OLk7VHJpweJu2O0jc6H0leTZ3KSwAYM2Ck2shLWqtE7 j2j8VQsP+AXocFRvx5m7iPtWBcPu4DQ54z1ACstaKmllmcpAHO43xcRpfsV1j7v9WdRlGM nau1eBK2pe+WGmB8atLdy3Bezjr5SGVZXzLRDJWTiukbPNaKFaI1+7IwKsexVw== X-Coremail-Antispam: 1Uk129KBj9xXoW7Jw47tF4xur1fGw4UtryUtwc_yoWDurgE9r WDKw1kZ3y5ZFy093W3JFn8Gr4fCryI9FyxG348t3s2vryUWw4FkanrGryjvw4xta1YvFsx WFyFga4j9r1UWosvyTuYvTs0mTUanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUj1kv1TuYvT s0mT0YCTnIWjgY5I8CrVACY4xI64kE6c02F40Ex7xfMxkIecxEwVAFwVW8JbIjqfuFe4nv WSU5nxnvy29KBjDU0xBIdaVrnRJUUUvYb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I20V C2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rwA2 F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Ar0_tr1l84ACjcxK6xIIjx v20xvEc7CjxVAFwI0_Cr0_Gr1UM28EF7xvwVC2z280aVAFwI0_Gr1j6F4UJwA2z4x0Y4vE x4A2jsIEc7CjxVAFwI0_Gr1j6F4UJwAS0I0E0xvYzxvE52x082IY62kv0487Mc804VCY07 AIYIkI8VC2zVCFFI0UMc02F40EFcxC0VAKzVAqx4xG6I80ewAv7VC0I7IYx2IY67AKxVWU GVWUXwAv7VC2z280aVAFwI0_Gr0_Cr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7V AKI48JM4kE6xkIj40Ew7xC0wCY02Avz4vE14v_Gr1l42xK82IYc2Ij64vIr41l4I8I3I0E 4IkC6x0Yz7v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGV WUWwC2zVAF1VAY17CE14v26r1Y6r17MIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcVC0 I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY6I 8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBIdaVFxhVjvjDU 0xZFpf9x07jjBT5UUUUU= List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 15 Sep 2026 02:41:14 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/4848 From: Chen Qi Previously, no matter how you set DISTRO_FEATURES, it does not affect native recipes regarding the selinux ditro feature. Add 'selinux' to DISTRO_FEATURES_FILTER_NATIVE so that 'selinux' can be filtered into native recipes' DISTRO_FEATURES. This enables us to build selinux support for some native utilities, notably coreutils-native. This will also bring possible 'regressions' in case some recipes are enabling selinux for native variable without testing it, e.g., ostree. But these 'regressions' are really findings of errors of those recipes. Signed-off-by: Chen Qi --- conf/layer.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/conf/layer.conf b/conf/layer.conf index 245b4ef..172a1db 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -25,3 +25,5 @@ LAYERDEPENDS_selinux = " \ " PREFERRED_PROVIDER_virtual/refpolicy ??= "refpolicy-targeted" + +DISTRO_FEATURES_FILTER_NATIVE:append = " selinux"