Re: busybox with selinux

--===============1695562300377189790==
Content-Type: multipart/alternative; boundary="000000000000671ae506030124c5"

--000000000000671ae506030124c5
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I am using Yocto and have a hard time getting whole packages compiled
without errors.
The default settings are CONFIG_FEATURE_INDIVIDUAL=3Dn.

I want to know if CONFIG_FEATURE_INDIVIDUAL=3Dy is a MUST or not for SELinu=
x.
Any work around to keep CONFIG_FEATURE_INDIVIDUAL=3Dn?

--henry

On Tue, Aug 15, 2023 at 5:33=E2=80=AFPM Neal Gompa <[email protected]> wro=
te:

> On Tue, Aug 15, 2023 at 8:29=E2=80=AFPM Henry Zhang <[email protected]=
om>
> wrote:
> >
> > Hi folks,
> >
> > New version of SELinux complains of busybox when relabeling.
> > My busybox was compiled as CONFIG_FEATURE_INDIVIDUAL=3Dn
> > That means all applets of busybox share the same inode.
> > But SElinux requires each file assigned to an individual inode so that
> each file can be defined by file_contexts.
> >
> > Any suggestions?
>
> Why can't you use CONFIG_FEATURE_INDIVIDUAL=3Dy for your busybox build?
>
>
>
> --
> =E7=9C=9F=E5=AE=9F=E3=81=AF=E3=81=84=E3=81=A4=E3=82=82=E4=B8=80=E3=81=A4=
=EF=BC=81/ Always, there's only one truth!
>

--000000000000671ae506030124c5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>I am using Yocto and have a hard time getting whole p=
ackages compiled without errors.</div><div>The default settings are CONFIG_=
FEATURE_INDIVIDUAL=3Dn.</div><div><br></div><div>I want to know if CONFIG_F=
EATURE_INDIVIDUAL=3Dy is a MUST or not for SELinux.</div><div>Any work arou=
nd to keep CONFIG_FEATURE_INDIVIDUAL=3Dn?</div><div><br></div><div>--henry<=
br></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gma=
il_attr">On Tue, Aug 15, 2023 at 5:33=E2=80=AFPM Neal Gompa &lt;<a href=3D"=
mailto:[email protected]">[email protected]</a>&gt; wrote:<br></div><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:=
1px solid rgb(204,204,204);padding-left:1ex">On Tue, Aug 15, 2023 at 8:29=
=E2=80=AFPM Henry Zhang &lt;<a href=3D"mailto:[email protected]" targe=
t=3D"_blank">[email protected]</a>&gt; wrote:<br>
&gt;<br>
&gt; Hi folks,<br>
&gt;<br>
&gt; New version of SELinux complains of busybox when relabeling.<br>
&gt; My busybox was compiled as CONFIG_FEATURE_INDIVIDUAL=3Dn<br>
&gt; That means all applets of busybox share the same inode.<br>
&gt; But SElinux requires each file assigned to an individual inode so that=
 each file can be defined by file_contexts.<br>
&gt;<br>
&gt; Any suggestions?<br>
<br>
Why can&#39;t you use CONFIG_FEATURE_INDIVIDUAL=3Dy for your busybox build?=
<br>
<br>
<br>
<br>
-- <br>
=E7=9C=9F=E5=AE=9F=E3=81=AF=E3=81=84=E3=81=A4=E3=82=82=E4=B8=80=E3=81=A4=EF=
=BC=81/ Always, there&#39;s only one truth!<br>
</blockquote></div>

--000000000000671ae506030124c5--

--===============1695562300377189790==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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==

--===============1695562300377189790==--