refpolicy: add variant that builds modular policy

This adds a variant of refpolicy that builds the modular form of the
policy. While this requires more memory on the target device, along with
some tricks to deal with OpenWrt's volatile /var directory, it is useful
for experiementing with SELinux policy.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
This commit is contained in:
W. Michael Petullo
2020-11-01 07:44:56 -06:00
committed by Daniel Golle
parent 2e282537d0
commit 9eb9943f82
2 changed files with 39 additions and 2 deletions

View File

@@ -362,6 +362,12 @@ menu "Global build settings"
help
SELinux Reference Policy (refpolicy)
config SELINUXTYPE_targeted-modular
bool "targeted-modular"
select PACKAGE_refpolicy-modular
help
Modular SELinux Reference Policy (refpolicy-modular)
config SELINUXTYPE_dssp
bool "dssp"
select PACKAGE_selinux-policy