From 8360d714b7373386f4bebeb434dbc6f0a4a49b9d Mon Sep 17 00:00:00 2001 From: Kotaro Hashimoto Date: Fri, 3 Feb 2017 10:17:59 +0900 Subject: Enable smack in linux-linaro-qcomlt kernel This changes enables the smack feature in linux-linaro-qcomlt kernel by using configuration fragments. Change-Id: I54183ffcf31f63ea99ba785442e1833299c3f273 Signed-off-by: Kotaro Hashimoto --- .../meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg | 2 ++ meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg | 8 ++++++++ .../meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend | 6 ++++-- 3 files changed, 14 insertions(+), 2 deletions(-) create mode 100644 meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg create mode 100644 meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg (limited to 'meta-agl-bsp/meta-qcom/recipes-kernel/linux') diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg new file mode 100644 index 000000000..b5c48454e --- /dev/null +++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg @@ -0,0 +1,2 @@ +CONFIG_DEFAULT_SECURITY="smack" +CONFIG_DEFAULT_SECURITY_SMACK=y diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg new file mode 100644 index 000000000..62f465a45 --- /dev/null +++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg @@ -0,0 +1,8 @@ +CONFIG_IP_NF_SECURITY=m +CONFIG_IP6_NF_SECURITY=m +CONFIG_EXT2_FS_SECURITY=y +CONFIG_EXT3_FS_SECURITY=y +CONFIG_EXT4_FS_SECURITY=y +CONFIG_SECURITY=y +CONFIG_SECURITY_SMACK=y +CONFIG_TMPFS_XATTR=y diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend index c6aee5889..2af182032 100644 --- a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend +++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend @@ -1,10 +1,12 @@ FILESEXTRAPATHS_prepend := "${THISDIR}/files:" # Extra configuration options -SRC_URI += "file://fanotify.cfg \ +SRC_URI += "file://smack.cfg \ + file://smack-default-lsm.cfg \ + file://fanotify.cfg \ file://uinput.cfg \ file://hid.cfg " -KERNEL_CONFIG_FRAGMENTS_append = " ${WORKDIR}/fanotify.cfg ${WORKDIR}/uinput.cfg ${WORKDIR}/hid.cfg" +KERNEL_CONFIG_FRAGMENTS_append = " ${WORKDIR}/smack.cfg ${WORKDIR}/smack-default-lsm.cfg ${WORKDIR}/fanotify.cfg ${WORKDIR}/uinput.cfg ${WORKDIR}/hid.cfg" # Enable support for TP-Link TL-W722N USB Wifi adapter SRC_URI += " file://ath9k_htc.cfg " -- cgit 1.2.3-korg