busybox: Use wildcard for version number in busybox bbappend.

Signed-off-by: Philip Tricca <flihp@twobit.us>

 create mode 100644 recipes-core/busybox/busybox_%.bbappend
 delete mode 100644 recipes-core/busybox/busybox_1.21.1.bbappend
Signed-off-by: Joe MacDonald <joe@deserted.net>
libxcb: Use wildcard for version number in libxcb bbappend.

Signed-off-by: Philip Tricca <flihp@twobit.us>

 create mode 100644 recipes-graphics/xcb/libxcb_%.bbappend
 delete mode 100644 recipes-graphics/xcb/libxcb_1.9.3.bbappend
Signed-off-by: Joe MacDonald <joe@deserted.net>
sudo: Use wildcard for version number in sudo bbappend.

Signed-off-by: Philip Tricca <flihp@twobit.us>

 create mode 100644 recipes-extended/sudo/sudo_%.bbappend
 delete mode 100644 recipes-extended/sudo/sudo_1.8.8.bbappend
Signed-off-by: Joe MacDonald <joe@deserted.net>
libcgroup: Use wildcard for version number in libcgroup bbappend.

Signed-off-by: Philip Tricca <flihp@twobit.us>

 create mode 100644 recipes-core/libcgroup/libcgroup_%.bbappend
 delete mode 100644 recipes-core/libcgroup/libcgroup_0.38.bbappend
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: fix ftpwho install dir

ftpwho is installed into /usr/bin, not /usr/sbin.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: backport two patches to fix dhclient, hostname and ifconfig

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: fix real path for su.shadow

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: Updated FILESEXTRAPATHS_prepend value

The value was defined as:
FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-${PV}:"
and changed it to:
FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-2.20130424:"
becase the bb that inherit this overwrites the PV every time,
changing its name.

Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
core-image-selinux: update 'core-basic' packagegroup

packagegroup-core-basic has been renamed to packagegroup-full-cmdline,
update our core-image-selinux.

Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: allow sysadm to run rpcbind

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
audit: Add systemd support

Audit unit file is from https://fedorahosted.org/audit/browser/trunk/init.d/auditd.service

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
audit: fix the permission of configuration file

A ordinary use should not to access auditd configuration files

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: make proftpd be able to work

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: associate tmpfs_t (shm) to device_t (devtmpfs) file systems

The patch is backported from upstream.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
refpolicy: add rules for /var/log symlink on poky

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
policycoreutils: semanage

When modifying an selinux login record, seobject.py,
may try to log a value, self.sename,  which has been preset to "None"
and this will fail.  So, we set it to something useful.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
policycoreutils: drop the patch for old refpolicy

The patch policycoreutils-revert-run_init-open_init_pty.patch
is only for refpolicy version older than 2.20120725, now the
refpolicy is updated to 2.20130424 so drop the patch or it
will make run_init fail to start some init scripts.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
checkpolicy: Don't link against libfl

In policy_scan.l file, we have already removed all references to yywrap by
adding "%option noyywrap" statements to each flex source file that doesn't
override yywrap. After this, we no longer need to link against libfl and so
no longer get errors about undefined references to yylex.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
policycoreutils: Add missing dependencies to semanage

The semanage utility requires python-compression (for "import gzip")
and python-xml (for "import xml.etree.ElementTree").

Signed-off-by: Peter Seebach <peter.seebach@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
mesa: add dependency on libselinux-native

mesa builds a host utility named builtin_compiler,
and that needs selinux, too, if --enable-selinux is
specfied to configure.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>