X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=meta-app-framework%2Fconf%2Finclude%2Fagl-appfw-smack.inc;h=95092a9cee250be9929cf8037f2d8afa4c9e7910;hb=09c7f74cdba11719a8adf1a5ed8dd86994b13374;hp=90862cb09f70f9ac3ebdcb0f7488b61cd721993e;hpb=a9fd01093b3feda9a5f71484c1934c890da8cb52;p=AGL%2Fmeta-agl.git diff --git a/meta-app-framework/conf/include/agl-appfw-smack.inc b/meta-app-framework/conf/include/agl-appfw-smack.inc index 90862cb09..95092a9ce 100644 --- a/meta-app-framework/conf/include/agl-appfw-smack.inc +++ b/meta-app-framework/conf/include/agl-appfw-smack.inc @@ -1,12 +1,18 @@ # enable security features (smack, cynara) - required by Application Framework -OVERRIDES .= ":smack" -DISTRO_FEATURES_append = " smack dbus-cynara" +OVERRIDES .= ":with-lsm-smack" +DISTRO_FEATURES_append = " smack dbus-cynara xattr" # use tar-native to support SMACK extended attributes independently of host config -IMAGE_CMD_TAR = "tar --xattrs-include='*'" -IMAGE_DEPENDS_tar_append = " tar-replacement-native" +IMAGE_CMD_TAR = "tar --xattrs --xattrs-include='*'" +do_image_tar[depends] += "tar-replacement-native:do_populate_sysroot" EXTRANATIVEPATH += "tar-native" # security: enable ssh server in place of dropbear to support PAM on user sessions IMAGE_FEATURES += "ssh-server-openssh" +# enforce copy of xattrs (to be removed, see SPEC-475) +PACKAGECONFIG_append_pn-shadow = " attr" +PACKAGECONFIG_append_pn-shadow-native = " attr" + +# set the home directory for root +ROOT_HOME = "/home/0"