Enable smack in linux-linaro-qcomlt kernel

This changes enables the smack feature in linux-linaro-qcomlt kernel
by using configuration fragments.

Change-Id: I54183ffcf31f63ea99ba785442e1833299c3f273
Signed-off-by: Kotaro Hashimoto <Hashimoto.Kotaro@ds.MitsubishiElectric.co.jp>

diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg
new file mode 100644 (file)
index 0000000..b5c4845
--- /dev/null
+++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack-default-lsm.cfg
@@ -0,0 +1,2 @@
+CONFIG_DEFAULT_SECURITY="smack"
+CONFIG_DEFAULT_SECURITY_SMACK=y

diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg
new file mode 100644 (file)
index 0000000..62f465a
--- /dev/null
+++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/files/smack.cfg
@@ -0,0 +1,8 @@
+CONFIG_IP_NF_SECURITY=m
+CONFIG_IP6_NF_SECURITY=m
+CONFIG_EXT2_FS_SECURITY=y
+CONFIG_EXT3_FS_SECURITY=y
+CONFIG_EXT4_FS_SECURITY=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_SMACK=y
+CONFIG_TMPFS_XATTR=y

diff --git a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend
index c6aee58..2af1820 100644 (file)
--- a/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend
+++ b/meta-agl-bsp/meta-qcom/recipes-kernel/linux/linux-linaro-qcomlt%.bbappend
@@ -1,10 +1,12 @@
 FILESEXTRAPATHS_prepend := "${THISDIR}/files:"
 
 # Extra configuration options
-SRC_URI += "file://fanotify.cfg \
+SRC_URI += "file://smack.cfg \
+            file://smack-default-lsm.cfg \
+            file://fanotify.cfg \
             file://uinput.cfg \
             file://hid.cfg "
-KERNEL_CONFIG_FRAGMENTS_append = " ${WORKDIR}/fanotify.cfg ${WORKDIR}/uinput.cfg ${WORKDIR}/hid.cfg"
+KERNEL_CONFIG_FRAGMENTS_append = " ${WORKDIR}/smack.cfg ${WORKDIR}/smack-default-lsm.cfg ${WORKDIR}/fanotify.cfg ${WORKDIR}/uinput.cfg ${WORKDIR}/hid.cfg"
 
 # Enable support for TP-Link TL-W722N USB Wifi adapter
 SRC_URI += " file://ath9k_htc.cfg "