Name	refpolicy-targeted
Version	2.20170204
Summary	SELinux targeted policy
Description	This is the targeted variant of the SELinux reference policy. Most service domains are locked down. Users and admins will login in with unconfined_t domain, so they have the same access to the system as if SELinux was not enabled.
Section	base
License	GPLv2
Homepage
Recipe file	recipes-security/refpolicy/refpolicy-targeted_2.20170204.bb recipes-security/refpolicy/refpolicy_2.20170204.inc recipes-security/refpolicy/refpolicy_common.inc
Layer	meta-selinux (rocko branch)
Inherits	python-dir pythonnative
Dependencies	bzip2-replacement-native checkpolicy-native m4-native policycoreutils-native python-native semodule-utils-native
PACKAGECONFIG options

Sources

https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20170204.tar.bz2

Patches

Patch	Status
refpolicy-2.20170204/poky-fc-subs_dist.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-update-alternatives_sysvinit.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-update-alternatives_sysklogd.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-update-alternatives_hostname.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-update-alternatives_bash.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-fix-real-path_resolv.conf.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-fix-real-path_login.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-fix-real-path_shadow.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-fc-fix-bind.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-clock.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-dmesg.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-fstools.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-mta.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-netutils.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-nscd.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-screen.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-ssh.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-sysnetwork.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-udevd.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-rpm.patch	Inappropriate [configuration]
refpolicy-2.20170204/poky-fc-ftpwho-dir.patch	Pending
refpolicy-2.20170204/poky-fc-fix-real-path_su.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/refpolicy-update-for_systemd.patch	Unknown
refpolicy-2.20170204/poky-policy-add-syslogd_t-to-trusted-object.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-var-log-symlink.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-var-log-symlink-apache.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-var-log-symlink-audisp_remote_t.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-syslogd_t-symlink.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-var-cache-symlink.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-tmp-symlink.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-add-rules-for-bsdpty_device_t.patch	Pending
refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-allow-nfsd-to-exec-shell-commands.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch	Pending
refpolicy-2.20170204/poky-policy-allow-setfiles_t-to-read-symlinks.patch	Pending
refpolicy-2.20170204/poky-policy-fix-new-SELINUXMNT-in-sys.patch	Inappropriate [only for Poky]
refpolicy-2.20170204/poky-policy-allow-sysadm-to-run-rpcinfo.patch	Pending
refpolicy-2.20170204/poky-policy-fix-seutils-manage-config-files.patch	Pending
refpolicy-2.20170204/poky-policy-fix-setfiles-statvfs-get-file-count.patch	Pending
refpolicy-2.20170204/poky-policy-fix-dmesg-to-use-dev-kmsg.patch	Unknown
refpolicy-2.20170204/ftp-add-ftpd_t-to-mlsfilewrite.patch	Pending
refpolicy-targeted/refpolicy-fix-optional-issue-on-sysadm-module.patch	Pending
refpolicy-targeted/refpolicy-unconfined_u-default-user.patch	Inappropriate [configuration]

Other branches

This recipe in other branches of meta-selinux:

Branch	Recipe
master	refpolicy-targeted 2.20260312+git
whinlatter (Yocto Project 5.3)	refpolicy-targeted 2.20250923+git
walnascar (Yocto Project 5.2)	refpolicy-targeted 2.20250213+git
styhead (Yocto Project 5.1)	refpolicy-targeted 2.20240916+git
scarthgap (Yocto Project 5.0)	refpolicy-targeted 2.20240226+git
nanbield (Yocto Project 4.3)	refpolicy-targeted 2.20231002+gitX
mickledore (Yocto Project 4.2)	refpolicy-targeted 2.20221101+gitX
langdale (Yocto Project 4.1)	refpolicy-targeted 2.20221101+gitX
kirkstone (Yocto Project 4.0)	refpolicy-targeted 2.20210908+gitX
honister (Yocto Project 3.4)	refpolicy-targeted 2.20210203+gitX
hardknott (Yocto Project 3.3)	refpolicy-targeted 2.20210203+gitX
gatesgarth (Yocto Project 3.2)	refpolicy-targeted 2.20200229+gitX
dunfell (Yocto Project 3.1)	refpolicy-targeted 2.20200229+gitX
zeus (Yocto Project 3.0)	refpolicy-targeted 2.20190201
zeus (Yocto Project 3.0)	refpolicy-targeted 2.20190201+gitX
warrior (Yocto Project 2.7)	refpolicy-targeted 2.20190201
warrior (Yocto Project 2.7)	refpolicy-targeted 2.20190201+gitX
thud (Yocto Project 2.6)	refpolicy-targeted 2.20170204
thud (Yocto Project 2.6)	refpolicy-targeted 2.20170805+gitX
sumo (Yocto Project 2.5)	refpolicy-targeted 2.20170204
sumo (Yocto Project 2.5)	refpolicy-targeted 2.20170805+gitX
rocko (Yocto Project 2.4)	refpolicy-targeted 2.20170204 (this recipe)
rocko (Yocto Project 2.4)	refpolicy-targeted 2.20170805+gitX
morty (Yocto Project 2.2)	refpolicy-targeted git
morty (Yocto Project 2.2)	refpolicy-targeted 2.20151208
jethro (Yocto Project 2.0)	refpolicy-targeted git
jethro (Yocto Project 2.0)	refpolicy-targeted 2.20141203
jethro (Yocto Project 2.0)	refpolicy-targeted 2.20140311
fido (Yocto Project 1.8)	refpolicy-targeted 2.20140311
dizzy (Yocto Project 1.7)	refpolicy-targeted 2.20140311