Hi,

On 17 June 2014 16:41, Fathi Boudra <fathi.boudra@linaro.org> wrote:

Vishal,

1. against which tree should it be applied?

I have tested it against TC2 with the LSK tree. I was not sure if the patches directly go to LSK. I thought it should first go into config fragment tree.

2. do you want it enabled by default for all android builds?

Moving ahead SELinux is mandatory for Android so it needs to be enabled across all the platforms we care for. Linux-linaro and LSK are validated on VExpress platform so I am enabling the userspace bits for VExpress to start with.

On 17 June 2014 13:57, Vishal Bhoj <vishal.bhoj@linaro.org> wrote:
> From: Vishal Bhoj <vishal.bhoj@linaro.org>
>
> Signed-off-by: Vishal Bhoj <vishal.bhoj@linaro.org>
> ---
> linaro/configs/android.conf | 10 ++++++++++
> 1 file changed, 10 insertions(+)
>
> diff --git a/linaro/configs/android.conf b/linaro/configs/android.conf
> index e4fd1ad..50e8ac2 100644
> --- a/linaro/configs/android.conf
> +++ b/linaro/configs/android.conf
> @@ -40,3 +40,13 @@ CONFIG_ADF_FBDEV=y
> CONFIG_ADF_MEMBLOCK=y
> CONFIG_DMA_SHARED_BUFFER=y
> CONFIG_TUN=y
> +CONFIG_AUDIT=y
> +CONFIG_NF_CONNTRACK_SECMARK=y
> +CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
> +CONFIG_NETFILTER_XT_TARGET_SECMARK=y
> +CONFIG_IP_NF_SECURITY=y
> +CONFIG_SECURITY=y
> +CONFIG_SECURITY_NETWORK=y
> +CONFIG_LSM_MMAP_MIN_ADDR=4096
> +CONFIG_SECURITY_SELINUX=y
> +CONFIG_EXT4_FS_SECURITY=y
> --
> 1.9.1
>
>

> _______________________________________________
> linaro-dev mailing list
> linaro-dev@lists.linaro.org
> http://lists.linaro.org/mailman/listinfo/linaro-dev