[OE-core] [PATCH] shadow: 'useradd' copies root's extended attributes

[Mark Hatle]

On 1/4/18 4:41 AM, Patrick Ohly wrote:
> On Thu, 2018-01-04 at 11:18 +0100, José Bollo wrote:
>>> Do you agree to move the patch to Smack specific layer? Such as 
>>> meta-security?
>>
>> I agree.
> 
> Layers like meta-security should not modify recipes from other layers,
> at least not by default. That would violate the "Yocto Compatible 2.0"
> rules.

You can modify (bbappend) to an existing recipe.  You can't change the behavior
(specifically the md5sum) of the function though, unless that new functionality
is enabled.)

This is why we added an 'selinux' distro_feature.  The selinux layer does not
modify behavior (via bbappend) unless selinux distro is enabled.

'smack' should be able to do the same thing, with a similar distro feature.

--Mark

> Besides, it would be harder to maintain in a separate layer - for the
> maintainer of that layer.
> 
> I still think this patch belong into OE-core, even though it is then
> more work for the OE-core maintainer.
>