[yocto] [meta-security][PATCH 1/3] linux-%: remove kernel fragments now in cache
Armin Kuster
akuster808 at gmail.com
Tue Aug 13 16:54:38 PDT 2019
Signed-off-by: Armin Kuster <akuster808 at gmail.com>
---
recipes-kernel/linux/linux-%.bbapend | 9 ---------
recipes-kernel/linux/linux/apparmor.cfg | 9 ---------
recipes-kernel/linux/linux/apparmor_on_boot.cfg | 1 -
recipes-kernel/linux/linux/smack-default-lsm.cfg | 2 --
recipes-kernel/linux/linux/smack.cfg | 7 -------
5 files changed, 28 deletions(-)
delete mode 100644 recipes-kernel/linux/linux-%.bbapend
delete mode 100644 recipes-kernel/linux/linux/apparmor.cfg
delete mode 100644 recipes-kernel/linux/linux/apparmor_on_boot.cfg
delete mode 100644 recipes-kernel/linux/linux/smack-default-lsm.cfg
delete mode 100644 recipes-kernel/linux/linux/smack.cfg
diff --git a/recipes-kernel/linux/linux-%.bbapend b/recipes-kernel/linux/linux-%.bbapend
deleted file mode 100644
index ec7adeb..0000000
--- a/recipes-kernel/linux/linux-%.bbapend
+++ /dev/null
@@ -1,9 +0,0 @@
-FILESEXTRAPATHS_prepend := "${THISDIR}/linux:"
-
-SRC_URI += "\
- ${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor.cfg', '', d)} \
- ${@bb.utils.contains('DISTRO_FEATURES', 'apparmor', ' file://apparmor_on_boot.cfg', '', d)} \
- ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack.cfg', '', d)} \
- ${@bb.utils.contains('DISTRO_FEATURES', 'smack', ' file://smack-default-lsm.cfg', '', d)} \
- ${@bb.utils.contains('DISTRO_FEATURES', 'yama', ' file://yama.cfg', '', d)} \
-"
diff --git a/recipes-kernel/linux/linux/apparmor.cfg b/recipes-kernel/linux/linux/apparmor.cfg
deleted file mode 100644
index ae6cdcd..0000000
--- a/recipes-kernel/linux/linux/apparmor.cfg
+++ /dev/null
@@ -1,9 +0,0 @@
-CONFIG_AUDIT=y
-CONFIG_SECURITY_PATH=y
-CONFIG_SECURITY_APPARMOR=y
-CONFIG_SECURITY_APPARMOR_HASH=y
-CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
-CONFIG_INTEGRITY_AUDIT=y
-CONFIG_DEFAULT_SECURITY_APPARMOR=y
-CONFIG_DEFAULT_SECURITY="apparmor"
-CONFIG_AUDIT_GENERIC=y
diff --git a/recipes-kernel/linux/linux/apparmor_on_boot.cfg b/recipes-kernel/linux/linux/apparmor_on_boot.cfg
deleted file mode 100644
index fc35740..0000000
--- a/recipes-kernel/linux/linux/apparmor_on_boot.cfg
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
diff --git a/recipes-kernel/linux/linux/smack-default-lsm.cfg b/recipes-kernel/linux/linux/smack-default-lsm.cfg
deleted file mode 100644
index b5c4845..0000000
--- a/recipes-kernel/linux/linux/smack-default-lsm.cfg
+++ /dev/null
@@ -1,2 +0,0 @@
-CONFIG_DEFAULT_SECURITY="smack"
-CONFIG_DEFAULT_SECURITY_SMACK=y
diff --git a/recipes-kernel/linux/linux/smack.cfg b/recipes-kernel/linux/linux/smack.cfg
deleted file mode 100644
index 0d5fc64..0000000
--- a/recipes-kernel/linux/linux/smack.cfg
+++ /dev/null
@@ -1,7 +0,0 @@
-CONFIG_NETLABEL=y
-CONFIG_SECURITY_NETWORK=y
-# CONFIG_SECURITY_NETWORK_XFRM is not set
-CONFIG_SECURITY_SMACK=y
-CONFIG_SECURITY_SMACK_BRINGUP=y
-CONFIG_SECURITY_SMACK_APPEND_SIGNALS=y
-CONFIG_TMPFS_XATTR=y
--
2.17.1
More information about the yocto
mailing list