summaryrefslogtreecommitdiffstats
path: root/meta-security/recipes-kernel/linux/linux-%.bbappend
blob: 717d32e3a6d0845966adf05228af6868e1027736 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
FILESEXTRAPATHS_prepend := "${THISDIR}/linux:"

IS_KERNEL_RECIPE := "${@bb.data.inherits_class('kernel', d) and 'yes' or 'no'}"
SMACK_KERNEL_SRC_URI_no = ""
SMACK_KERNEL_SRC_URI_yes = ""

# Kernel config fragment enabling Smack, without making it the default explicitly.
SMACK_KERNEL_SRC_URI_yes += "file://smack.cfg"

# When added, set Smack as the default LSM.
SMACK_DEFAULT_SECURITY_CFG = "file://smack-default-lsm.cfg"

# Add it by default, can be overridden by changing this variable here.
SMACK_DEFAULT_SECURITY ??= "${SMACK_DEFAULT_SECURITY_CFG}"
SMACK_KERNEL_SRC_URI_yes += " ${SMACK_DEFAULT_SECURITY}"

SRC_URI_append_with-lsm-smack = "${SMACK_KERNEL_SRC_URI_${IS_KERNEL_RECIPE}}"