CBL-Mariner/SPECS/setools
Chris PeBenito 0ec698fbc6
Enable SELinux by default on all images. (#1757)
* Add prototype SELinux auto configure

* Add 'force_enforcing' option for SELinux

* Fix setools-console tools.

* Enable SELinux by default (permissive mode) on all images.

Drop build system unit test as it breaks with SELinux enabled on core-efi.

* selinux-policy: Update to 2.20210908.

* Update to 2.20220106.

Implement policy for systemd-homed and systemd-userdbd.

* Fix RPM changelog date.

* Finalize systemd-homed policy.

* Change SELinux enablement to not affect CONFIG_LSM.

* Document build settings

* Update cgmanifest

* Update toolkit/docs/formats/imageconfig.md

Co-authored-by: Christopher Co <35273088+christopherco@users.noreply.github.com>

* audit: Remove override so auditd starts by default.

* Add IsValid() call for SELinux inKkernelCommandLine

* Add unit test for missing selinux package

* Fix debug output for selinux setfiles

Co-authored-by: Daniel McIlvaney <damcilva@microsoft.com>
Co-authored-by: Christopher Co <35273088+christopherco@users.noreply.github.com>
2022-02-01 08:24:41 -05:00
..
0001-Make-NetworkX-optional.patch Enable SELinux by default on all images. (#1757) 2022-02-01 08:24:41 -05:00
setools.signatures.json Merge 1.0 to dev branch 2021-08-19 13:46:51 -07:00
setools.spec Enable SELinux by default on all images. (#1757) 2022-02-01 08:24:41 -05:00