1 DISTRO_FEATURES:append = " acl xattr selinux"
3 # Reiterate the upstream default of targeted policy since that
4 # is the mostly widely used model, and it will likely be easier
5 # to pull policy from other distributions for it.
6 # Having an explicit setting here seems useful for documentation
7 # purposes, and it is still possible that using one of the other
8 # refpolicy package options as the AGL default desirable, and it
10 PREFERRED_PROVIDER_virtual/refpolicy ?= "refpolicy-targeted"
12 # Default to permissive mode
13 DEFAULT_ENFORCING ?= "permissive"
15 # Override the base image class to get the SELinux labeling hook
16 AGL_BASE_IMAGE ?= "selinux-image"
18 # Mask out meta-selinux's linux-yocto kernel config bbappend to
19 # avoid collision with AGL's own more universal scheme.
20 BBMASK += "meta-selinux/recipes-kernel/linux/"