January 2018
Intermediate to advanced
456 pages
12h 49m
English
We will first need to add Linux kernel support for our selected security framework. To enable SELinux support, we need to configure the Linux kernel as explained in the Configuring the Linux kernel section in Chapter 2, The BSP Layer. We can add the following changes to the Wandboard's defconfig in a bbappend to the Linux kernel recipe:
CONFIG_AUDIT=y CONFIG_SECURITY=y CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_SELINUX=y
Refer to the source code distributed with the book for further details.
The meta-selinux layer enables SELinux support on a Yocto image. To use it, first we need to clone it into the sources directory:
$ cd /opt/yocto/fsl-community-bsp/sources $ git clone git://git.yoctoproject.org/meta-selinux
Read now
Unlock full access