From patchwork Fri Nov 6 04:54:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 103204 Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.13901.1793940889723289604 for ; Thu, 05 Nov 2026 20:54:50 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [123.125.172.206]) by mtasvr (Coremail) with SMTP id _____wBX6twgXe1qo5oDAA--.18141S3; Fri, 06 Nov 2026 12:52:49 +0800 (CST) Received: from chenqi-Redmi.. (unknown [123.125.172.206]) by front01 (Coremail) with SMTP id C6CowADnd2jIXO1qmt8tAA--.32741S2; Fri, 06 Nov 2026 12:51:20 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: chen_q07@163.com Subject: [meta-selinux][wrynose][PATCH 1/5] MAINTAINERS: update information Date: Fri, 6 Nov 2026 12:54:21 +0800 Message-ID: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-CM-TRANSID: C6CowADnd2jIXO1qmt8tAA--.32741S2 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAgYDCmrshhUP1QAAsC X-CM-DELIVERINFO: =?B?fV8hb6c9tbm9bwt5VqgwP2Pu2dSP9LtrOQxHOAXUJl/eWtrOBydmTZkAAV6p44o2Ir PoOIpW4/8Z0l7A1TJMY5S9w3rXseusdE6L9AfGjtpWtBWdP7tkbCQOK5t/qNP92FA/bty0 cB5ZI1V2tz9H/wA4Rt9eZhTX8ruIa9FiLn52svHMxANV5pBDaoysanwMOC1spA== X-Coremail-Antispam: 1Uk129KBj9xXoW7Jw4rKry7XF4fZrWxWry3Awc_yoW3KFc_C3 9rGayDWFyUCFyIkayIgF9IkrZYkrW7GFnrX3Z2q3ZxA34DAr90qrWkKFn3u345JFW7KF4Y ga45Xayakr4j9osvyTuYvTs0mTUanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUj1kv1TuYvT s0mT0YCTnIWjgY5I8CrVACY4xI64kE6c02F40Ex7xfMxkIecxEwVAFwVW8XbIjqfuFe4nv WSU5nxnvy29KBjDU0xBIdaVrnRJUUUvlb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I20V C2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rwA2 F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_JFI_Gr1l84ACjcxK6xIIjx v20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWxJr0_GcWl84ACjcxK6I8E 87Iv6xkF7I0E14v26F4UJVW0owAS0I0E0xvYzxvE52x082IY62kv0487Mc804VCY07AIYI kI8VC2zVCFFI0UMc02F40EFcxC0VAKzVAqx4xG6I80ewAv7VC0I7IYx2IY67AKxVWUJVWU GwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7VAKI4 8JM4kE6xkIj40Ew7xC0wCY02Avz4vE14v_Gryl42xK82IYc2Ij64vIr41l4I8I3I0E4IkC 6x0Yz7v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWw C2zVAF1VAY17CE14v26r1Y6r17MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_ JF4lIxAIcVC0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJV WUCwCI42IY6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBI daVFxhVjvjDU0xZFpf9x07j5vtZUUUUU= List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 06 Nov 2026 04:54:51 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5248 From: Chen Qi I'll be maintaining meta-selinux for all active branches. Update this MAINTAINERS file to include this information. Signed-off-by: Chen Qi --- MAINTAINERS | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index 42a85e2..2933168 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -25,6 +25,16 @@ Please keep this list in alphabetical order. Maintainers List (try to look for most precise areas first) +COMMON +M: Chen Qi +L: yocto-patches@lists.yoctoproject.org +Q: https://patchwork.yoctoproject.org/project/yocto/ +S: Maintained +F: conf +F: classes +F: dynamic-layers +F: recipes-* + COMMON M: Joe MacDonald F: conf From patchwork Fri Nov 6 04:54:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 103205 Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.13900.1793940889061132011 for ; Thu, 05 Nov 2026 20:54:49 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [123.125.172.206]) by mtasvr (Coremail) with SMTP id _____wC3StUjXe1qp5oDAA--.14343S3; Fri, 06 Nov 2026 12:52:51 +0800 (CST) Received: from chenqi-Redmi.. (unknown [123.125.172.206]) by front01 (Coremail) with SMTP id C6CowADnd2jIXO1qmt8tAA--.32741S3; Fri, 06 Nov 2026 12:51:27 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: chen_q07@163.com Subject: [meta-selinux][wrynose][PATCH 2/5] refpolicy-targeted: remove useless POLICY_MLS_SENS setting Date: Fri, 6 Nov 2026 12:54:22 +0800 Message-ID: <20261106045426.2536283-2-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> References: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> MIME-Version: 1.0 X-CM-TRANSID: C6CowADnd2jIXO1qmt8tAA--.32741S3 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAgYDCmrshhUP1QABsD X-CM-DELIVERINFO: =?B?gH/lWKc9tbm9bwt5VqgwP2Pu2dSP9LtrOQxHOAXUJl/eWtrOBydmTZkAAV6p44o2Ir PoOIpW4/8Z0l7A1TJMY5S9w3rj0zZ2UiiD53z9UYf7+qMfmnGKwbf1rq6ZfoZjCF6R6xzG 9EUfGCWCAxr+aH5IvFNeZhTX8ruIa9FiLn52svHMF2RcGoVNkVWldaT/xEH8iA== X-Coremail-Antispam: 1Uk129KBj9xXoW7Jw4rWFWDAw4xKF4xXr1DurX_yoWfXrXEgr WxZr9rAa15ZF48G3WIk34fGF1qvr1rKr1a9r10k34ag3s8Zr4fKrW5XFyrArWfJF15Xa1f GFyagFyjkry7GosvyTuYvTs0mTUanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUj1kv1TuYvT s0mT0YCTnIWjgY5I8CrVACY4xI64kE6c02F40Ex7xfMxkIecxEwVAFwVW8XbIjqfuFe4nv WSU5nxnvy29KBjDU0xBIdaVrnRJUUUvlb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I20V C2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r106r15M28lY4IEw2IIxxk0rwA2 F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_JFI_Gr1l84ACjcxK6xIIjx v20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVWxJr0_GcWl84ACjcxK6I8E 87Iv6xkF7I0E14v26F4UJVW0owAS0I0E0xvYzxvE52x082IY62kv0487Mc804VCY07AIYI kI8VC2zVCFFI0UMc02F40EFcxC0VAKzVAqx4xG6I80ewAv7VC0I7IYx2IY67AKxVWUGVWU XwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7VAKI4 8JM4kE6xkIj40Ew7xC0wCY02Avz4vE14v_Gryl42xK82IYc2Ij64vIr41l4I8I3I0E4IkC 6x0Yz7v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWw C2zVAF1VAY17CE14v26r1Y6r17MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAFwI0_Jr0_ JF4lIxAIcVC0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJV WUCwCI42IY6I8E87Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBI daVFxhVjvjDU0xZFpf9x07jYv38UUUUU= List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 06 Nov 2026 04:54:51 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5247 From: Chen Qi When 'mcs' refpolicy type is used, the mls sens is hardcoded to 1. See https://github.com/SELinuxProject/refpolicy/blob/main/policy/mcs#L7 So remove this POLICY_MLS_SENS as it's useless and misleading. Signed-off-by: Chen Qi --- recipes-security/refpolicy/refpolicy-targeted_git.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/recipes-security/refpolicy/refpolicy-targeted_git.bb b/recipes-security/refpolicy/refpolicy-targeted_git.bb index 321407d..b4bec46 100644 --- a/recipes-security/refpolicy/refpolicy-targeted_git.bb +++ b/recipes-security/refpolicy/refpolicy-targeted_git.bb @@ -8,7 +8,6 @@ enabled. \ POLICY_NAME = "targeted" POLICY_TYPE = "mcs" -POLICY_MLS_SENS = "0" include refpolicy_${PV}.inc From patchwork Fri Nov 6 04:54:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 103207 Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.13857.1793940891106861019 for ; Thu, 05 Nov 2026 20:54:51 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [123.125.172.206]) by mtasvr (Coremail) with SMTP id _____wAXAdcmXe1qqpoDAA--.13801S3; Fri, 06 Nov 2026 12:52:54 +0800 (CST) Received: from chenqi-Redmi.. (unknown [123.125.172.206]) by front01 (Coremail) with SMTP id C6CowADnd2jIXO1qmt8tAA--.32741S4; Fri, 06 Nov 2026 12:51:30 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: chen_q07@163.com Subject: [meta-selinux][wrynose][PATCH 3/5] refpolicy_common: strip POLICY_CUSTOM_BUILDOPT before passing to make Date: Fri, 6 Nov 2026 12:54:23 +0800 Message-ID: <20261106045426.2536283-3-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> References: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> MIME-Version: 1.0 X-CM-TRANSID: C6CowADnd2jIXO1qmt8tAA--.32741S4 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAgYDCmrshhUP1QACsA X-CM-DELIVERINFO: =?B?dXzz86c9tbm9bwt5VqgwP2Pu2dSP9LtrOQxHOAXUJl/eWtrOBydmTZkAAV6p44o2Ir PoOIpW4/8Z0l7A1TJMY5S9w3rJ99hsPWH+Sxb2eKoJFXSF7CtdCudD6aPyPkDrzc2Ik5KG r9gp6j2ZjTHxXbKctGZeZhTX8ruIa9FiLn52svHMIeQPbq+Iiteo3cNpnuCF7w== X-Coremail-Antispam: 1Uk129KBj93XoW7tF17Gry7Zw48uFWUGrWrCrX_yoW8Gr18p3 y2y34Yya4jqFyIgrsruF97W3srGas8Gw4UurWDGFs8A3s8Jay8C3yvq3s7Wa1rZFy7Awn7 Aw1Yva47Cw4UAFgCm3ZEXasCq-sJn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7KY7ZEXa sCq-sGcSsGvfJ3gc02F40EFcxC0VAKzVAqx4xG6I80ewCY02Avz4vE14v_GrDv73VFW2AG mfu7bjvjm3AaLaJ3UjIYCTnIWjp_UUUYz7kC6x804xWl14x267AKxVWUJVW8JwAFc2x0x2 IEx4CE42xK8VAvwI8IcIk0rVWrJVCq3wAFIxvE14AKwVWUJVWUGwA2ocxC64kIII0Yj41l 84x0c7CEw4AK67xGY2AK021l84ACjcxK6xIIjxv20xvE14v26r4j6ryUM28EF7xvwVC0I7 IYx2IY6xkF7I0E14v26r4j6F4UM28EF7xvwVC2z280aVAFwI0_Cr1j6rxdM28EF7xvwVC2 z280aVCY1x0267AKxVWxJr0_GcWle2I262IYc4CY6c8Ij28IcVAaY2xG8wAqjxCEc2xF0c Ia020Ex4CE44I27wAqx4xG64xvF2IEw4CE5I8CrVC2j2WlYx0E2Ix0cI8IcVAFwI0_Jrv_ JF1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkEbVWUJVW8JwACjcxG0xvY0x0EwI xGrwAKzVCY07xG64k0F24lc2xSY4AK67AK6r45MxAIw28IcxkI7VAKI48JMxC20s026xCa FVCjc4AY6r1j6r4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_Jr Wlx4CE17CEb7AF67AKxVWUXVWUAwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2z2 80aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVWUJVW8JbIYCTnIWIevJa73UjIF yTuYvjxU2X_-DUUUU List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 06 Nov 2026 04:55:01 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5249 From: Chiluka Rohith POLICY_CUSTOM_BUILDOPT is passed directly to the refpolicy make command as CUSTOM_BUILDOPT. When layers use ':append' to extend this variable (e.g. POLICY_CUSTOM_BUILDOPT:append:distro = " option"), BitBake introduces a leading space. Passing that raw value to make causes: make: *** No rule to make target 'option'. Stop. Signed-off-by: Chiluka Rohith Signed-off-by: Chen Qi --- recipes-security/refpolicy/refpolicy_common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc index 014714c..1566591 100644 --- a/recipes-security/refpolicy/refpolicy_common.inc +++ b/recipes-security/refpolicy/refpolicy_common.inc @@ -126,7 +126,7 @@ EXTRA_OEMAKE = "NAME=${POLICY_NAME} \ DIRECT_INITRC=${POLICY_DIRECT_INITRC} \ SYSTEMD=${POLICY_SYSTEMD} \ MONOLITHIC=${POLICY_MONOLITHIC} \ - CUSTOM_BUILDOPT=${POLICY_CUSTOM_BUILDOPT} \ + CUSTOM_BUILDOPT=${@d.getVar('POLICY_CUSTOM_BUILDOPT').strip()} \ QUIET=${POLICY_QUIET} \ MLS_SENS=${POLICY_MLS_SENS} \ MLS_CATS=${POLICY_MLS_CATS} \ From patchwork Fri Nov 6 04:54:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 103206 Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.13902.1793940891877072316 for ; Thu, 05 Nov 2026 20:54:52 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [123.125.172.206]) by mtasvr (Coremail) with SMTP id _____wDnQtYmXe1qq5oDAA--.17720S3; Fri, 06 Nov 2026 12:52:54 +0800 (CST) Received: from chenqi-Redmi.. (unknown [123.125.172.206]) by front01 (Coremail) with SMTP id C6CowADnd2jIXO1qmt8tAA--.32741S5; Fri, 06 Nov 2026 12:51:32 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: chen_q07@163.com Subject: [meta-selinux][wrynose][PATCH 4/5] refpolicy: add m4 to RDEPENDS of dev package Date: Fri, 6 Nov 2026 12:54:24 +0800 Message-ID: <20261106045426.2536283-4-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> References: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> MIME-Version: 1.0 X-CM-TRANSID: C6CowADnd2jIXO1qmt8tAA--.32741S5 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAgYDCmrshhUP1QADsB X-CM-DELIVERINFO: =?B?BXi7/Kc9tbm9bwt5VqgwP2Pu2dSP9LtrOQxHOAXUJl/eWtrOBydmTZkAAV6p44o2Ir PoOIpW4/8Z0l7A1TJMY5S9w3qgkUg4q914l63ji6uNkdG+jmPbfr+lasrM5fEAhOkqmfHx eg2uxRu8wEjhJIHgQ+VeZhTX8ruIa9FiLn52svHMMiIFXcdJJ8TM7JLj/6JTPA== X-Coremail-Antispam: 1Uk129KBj9xXoW7Jw4xXr13uFWfKr17uF13Jrc_yoW3CrbEkr 9Fv347Zr1rAF4rt3WxAFyfAF1v9348Kr4agw1xKw12g34Uuw4fKr4jg3WrCrW3JFn0gr1U tasFgFyY9r1UXosvyTuYvTs0mTUanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUj1kv1TuYvT s0mT0YCTnIWjgY5I8CrVACY4xI64kE6c02F40Ex7xfMxkIecxEwVAFwVW8XbIjqfuFe4nv WSU5nxnvy29KBjDU0xBIdaVrnRJUUUkEb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I20V C2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r106r15M28lY4IEw2IIxxk0rwA2 F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Gr0_Xr1l84ACjcxK6xIIjx v20xvEc7CjxVAFwI0_Gr0_Cr1l84ACjcxK6I8E87Iv67AKxVWxJr0_GcWl84ACjcxK6I8E 87Iv6xkF7I0E14v26F4UJVW0owAS0I0E0xvYzxvE52x082IY62kv0487Mc804VCY07AIYI kI8VC2zVCFFI0UMc02F40EFcxC0VAKzVAqx4xG6I80ewAv7VC0I7IYx2IY67AKxVWUXVWU AwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCjc4AY6r1j6r4UM4x0Y48IcxkI7VAKI4 8JM4kE6xkIj40Ew7xC0wCY02Avz4vE14v_Gryl42xK82IYc2Ij64vIr41l4I8I3I0E4IkC 6x0Yz7v_Jr0_Gr1lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxVWUGVWUWw C2zVAF1VAY17CE14v26r1Y6r17MIIF0xvE2Ix0cI8IcVAFwI0_Jr0_JF4lIxAIcVC0I7IY x2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY6I8E87 Iv67AKxVWUJVW8JwCI42IY6I8E87Iv6xkF7I0E14v26r1j6r4UYxBIdaVFxhVjvjDU0xZF pf9x07jFbyZUUUUU= List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 06 Nov 2026 04:55:01 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5251 From: Chen Qi m4 is needed for parsing the .if files (interface files) from refpolicy-xxx-dev packages. Signed-off-by: Chen Qi --- recipes-security/refpolicy/refpolicy_common.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-security/refpolicy/refpolicy_common.inc b/recipes-security/refpolicy/refpolicy_common.inc index 1566591..be81cea 100644 --- a/recipes-security/refpolicy/refpolicy_common.inc +++ b/recipes-security/refpolicy/refpolicy_common.inc @@ -97,6 +97,7 @@ DEPENDS = "bzip2-replacement-native checkpolicy-native policycoreutils-native se RDEPENDS:${PN}-dev = " \ python3-core \ + m4 \ " PACKAGE_ARCH = "${MACHINE_ARCH}" From patchwork Fri Nov 6 04:54:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Chen Qi X-Patchwork-Id: 103208 Received: from cetc.com.cn (cetc.com.cn [220.181.39.39]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.13858.1793940891869011586 for ; Thu, 05 Nov 2026 20:54:52 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: cetc.com.cn, ip: 220.181.39.39, mailfrom: chenqi_hycx@cetc.com.cn) Received: from mail.cetc.com.cn (unknown [123.125.172.206]) by mtasvr (Coremail) with SMTP id _____wC3K9wmXe1qrJoDAA--.17855S3; Fri, 06 Nov 2026 12:52:54 +0800 (CST) Received: from chenqi-Redmi.. (unknown [123.125.172.206]) by front01 (Coremail) with SMTP id C6CowADnd2jIXO1qmt8tAA--.32741S6; Fri, 06 Nov 2026 12:51:33 +0800 (CST) From: chenqi_hycx@cetc.com.cn To: yocto-patches@lists.yoctoproject.org Cc: chen_q07@163.com Subject: [meta-selinux][wrynose][PATCH 5/5] packagegroup/selinux: require selinux-init only for sysvinit Date: Fri, 6 Nov 2026 12:54:25 +0800 Message-ID: <20261106045426.2536283-5-chenqi_hycx@cetc.com.cn> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> References: <20261106045426.2536283-1-chenqi_hycx@cetc.com.cn> MIME-Version: 1.0 X-CM-TRANSID: C6CowADnd2jIXO1qmt8tAA--.32741S6 X-CM-SenderInfo: xfkh015lbk5un06fv33fof0zgofq/1tbiAQYDCmrsh9MP1gAAsF X-CM-DELIVERINFO: =?B?f8jxRKc9tbm9bwt5VqgwP2Pu2dSP9LtrOQxHOAXUJl/eWtrOBydmTZkAAV6p44o2Ir PoOAN5QhYBP/Hfs96vmoQs/I/RZF56e3gwBw0xvh1O7Js5QTXW7if5QssHGo8EUxkXDz1x X++nEIhAyYYkmh3FyN5eZhTX8ruIa9FiLn52svHMAkfqG1GlAa7ddourGtwcbQ== X-Coremail-Antispam: 1Uk129KBj93XoW7KrykXrWfXw1xuFW8Gry3trc_yoW8Cr4Upr sFyF1UJr10gFy8Xrnru3W2gw4ruFWrCa4UA345Ka48tFn8ur18XF9rWF45GFZrXF13Z3W8 A3WY93yDKaykXagCm3ZEXasCq-sJn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7KY7ZEXa sCq-sGcSsGvfJ3gc02F40EFcxC0VAKzVAqx4xG6I80ewCY02Avz4vE14v_GrDv73VFW2AG mfu7bjvjm3AaLaJ3UjIYCTnIWjp_UUUY77kC6x804xWl14x267AKxVWUJVW8JwAFc2x0x2 IEx4CE42xK8VAvwI8IcIk0rVWrJVCq3wAFIxvE14AKwVWUJVWUGwA2ocxC64kIII0Yj41l 84x0c7CEw4AK67xGY2AK021l84ACjcxK6xIIjxv20xvE14v26r4j6ryUM28EF7xvwVC0I7 IYx2IY6xkF7I0E14v26r4j6F4UM28EF7xvwVC2z280aVAFwI0_Cr1j6rxdM28EF7xvwVC2 z280aVCY1x0267AKxVWxJr0_GcWle2I262IYc4CY6c8Ij28IcVAaY2xG8wAqjxCEc2xF0c Ia020Ex4CE44I27wAqx4xG64xvF2IEw4CE5I8CrVC2j2WlYx0E2Ix0cI8IcVAFwI0_JF0_ Jw1lYx0Ex4A2jsIE14v26r1j6r4UMcvjeVCFs4IE7xkEbVWUJVW8JwACjcxG0xvY0x0EwI xGrwAKzVCY07xG64k0F24lc2xSY4AK67AK6r45MxAIw28IcxkI7VAKI48JMxC20s026xCa FVCjc4AY6r1j6r4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_Jr Wlx4CE17CEb7AF67AKxVWUXVWUAwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0xvE2Ix0 cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAIcVC2z2 80aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVW8JVW8JrUvcSsGvfC2KfnxnUUI 43ZEXa7IU86bytUUUUU== List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 06 Nov 2026 04:55:01 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5250 From: Chen Qi The selinux-init for systemd is quite misleading. systemd itself can load selinux policies. Extra userspace tools are not needed for systemd. In fact, the init script does nothing but only checks some tools. And the result can be misleading as these tool are not necessary for systemd. Signed-off-by: Chen Qi --- recipes-security/packagegroups/packagegroup-core-selinux.bb | 2 +- recipes-security/packagegroups/packagegroup-selinux-minimal.bb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-security/packagegroups/packagegroup-core-selinux.bb b/recipes-security/packagegroups/packagegroup-core-selinux.bb index 148c8a2..b5dc1e4 100644 --- a/recipes-security/packagegroups/packagegroup-core-selinux.bb +++ b/recipes-security/packagegroups/packagegroup-core-selinux.bb @@ -20,7 +20,7 @@ RDEPENDS:${PN} = " \ setools \ setools-console \ selinux-autorelabel \ - selinux-init \ + ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'selinux-init', '', d)} \ selinux-labeldev \ refpolicy \ coreutils \ diff --git a/recipes-security/packagegroups/packagegroup-selinux-minimal.bb b/recipes-security/packagegroups/packagegroup-selinux-minimal.bb index f06b183..b8e2825 100644 --- a/recipes-security/packagegroups/packagegroup-selinux-minimal.bb +++ b/recipes-security/packagegroups/packagegroup-selinux-minimal.bb @@ -20,7 +20,7 @@ RDEPENDS:${PN} = "\ policycoreutils-sestatus \ policycoreutils-setfiles \ selinux-autorelabel \ - selinux-init \ + ${@bb.utils.contains('DISTRO_FEATURES', 'sysvinit', 'selinux-init', '', d)} \ selinux-labeldev \ refpolicy \ "