From 843be6ed8fe6a82b42b5e825d37000d61d9706f3 Mon Sep 17 00:00:00 2001 From: Chiluka Rohith Date: Wed, 1 Jul 2026 18:49:43 +0530 Subject: [PATCH] refpolicy-targeted: enable PipeWire system-service mode for Qualcomm The upstream PipeWire SELinux policy has been merged into refpolicy (SELinuxProject/refpolicy#1109). Set POLICY_CUSTOM_BUILDOPT to pipewire_system_service so that PipeWire runs as a system-wide daemon on Qualcomm embedded targets. Signed-off-by: Chiluka Rohith --- .../recipes-security/refpolicy/refpolicy-targeted_git.bbappend | 2 ++ 1 file changed, 2 insertions(+) diff --git a/dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend b/dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend index fa7f4a120..b285114f9 100644 --- a/dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend +++ b/dynamic-layers/selinux/recipes-security/refpolicy/refpolicy-targeted_git.bbappend @@ -4,3 +4,5 @@ SRC_URI:append:qcom = " \ file://0001-Add-SELinux-policy-for-nhx.sh.patch \ ${@bb.utils.contains('MACHINE_FEATURES', 'optee', '', 'file://0002-Enable-the-tunable-flag-tee_supplicant_qtee.patch', d)} \ " + +POLICY_CUSTOM_BUILDOPT:qcom = "pipewire_system_service"