[Arm-dev] kernel rebase for rpi2/rpi3 : call for feedback !

Fri Jul 15 11:34:28 UTC 2016
Jacco Ligthart <jacco at redsleeve.org>

On 07/15/2016 01:10 PM, Fabian Arrotin wrote:
> On 15/07/16 13:00, Jacco Ligthart wrote:
>> Hi Fabian,
>>
>> I recompiled these for redsleeve. This seems also to work.
>>
>> couple of comments though:
>> - I got an install error: "cp: target `/boot/overlays/' is not a directory"
>>     maybe add this directory to the kernel rpm
>> - and another: "line 6: /usr/sbin/dracut: No such file or directory"
>>     maybe depend on dracut (is this needed? it boots fine without)
>>
>> Now only find out how to enable selinux :)
>>
>> Jacco
> Hi Jacco,
>
> The .spec has this :
> Requires:       dracut
>
> And it's called in %post
> /usr/sbin/dracut /boot/initramfs-%{version}-%{release}.img
> %{version}-%{release}
$ rpm -qpR
/tmp/raspberrypi2-kernel-4.4.14-v7.2.20160704gite98827a.el7.armv7hl.rpm
                                                   
/bin/sh                                                                        

/bin/sh                                                                        

/bin/sh                                                                        

rpmlib(CompressedFileNames) <=
3.0.4-1                                         
rpmlib(FileDigests) <=
4.6.0-1                                                 
rpmlib(PayloadFilesHavePrefix) <=
4.0-1                                        
rpmlib(PayloadIsXz) <= 5.2-1 

This does not show dracut (or any of the other requires). Maybe we
should do the requires in the kernel package section, in stead of the
main section that does not really produce a package. (probably my bad :(
) This would also explains why I previously had similar issues with
coreutils as requires.

> I'll have a look at the /boot/overlays thing
>
> For selinux, it works fine and it's all included (via
> bcm2709_selinux_config.patch).
> Be sure that your /boot/cmdline.txt doesn't disable it, and that
> /etc/sysconfig/selinux is correctly configured :-)
Not sure what happens:
cmdline.txt has no reference to selinux at all.

the config should be OK:
$ grep -v ^# /etc/selinux/config
SELINUX=permissive
SELINUXTYPE=targeted

It seems to start at boot time:
$ dmesg |grep -i selinux
[    0.000657] SELinux:  Initializing.
[    0.000705] SELinux:  Starting in permissive mode
[    0.266061] SELinux:  Registering netfilter hooks

But in the end it is disabled:
$ getenforce
Disabled