linux-yocto: add kernel fragment and scc to support xen on linux 3.4, 3.8, and 3.10.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
linux-yocto: add optional support for aufs and xen using DISTRO_FEATURES.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
xen: add 4.3.0 recipe.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
xen-image-minimal: update image to support xen 4.3.0 base with xl toolstack.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
busybox: Add getopt since lxc templates require it

Signed-off-by: David Nyström <david.nystrom@enea.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: Put the xend daemon in the xen-xend package.

Just a bit of clean up. I know xend is deprecated and hopefully no
one will use it but it should end up in the right package.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
libvirt: don't mount securityfs or selinux if userns enabled

commit 6807238d87fd [Ensure securityfs is mounted readonly in
container] from upstream libvirt requires securityfs to be mounted,
always. Failing to use a kernel without SECURITYFS support results in
the following error when you attempt to start a lxc guest:

error : lxcContainerMountBasicFS:807 : Failed to mkdir securityfs: No
such file or directory Input/output error

Here we apply an upstream fix for this which allows you to use userns
support instead of SECURITYFS, by using <idmap> in your guest config.

A similar situation exists for SELINUX so here we are bringing in 2
more upstream commits, the first for context and the second, which
like the securityfs patch, doesn't force selinux to be mounted if
userns is used.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Cc: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: Put the XSM policy in the flask package.

It make make sense to break this out into its own package in the
future for those that want to ship a monolithic policy without the
tools but for now we should at least get it in the flask package.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>