[Feature][ZXW-65]merged P49 base code
Change-Id: I3e09c0c3d47483bc645f02310380ecb7fc6f4041
diff --git a/cap/zx297520v3/sources/meta-selinux/recipes-security/selinux/selinux-sandbox.inc b/cap/zx297520v3/sources/meta-selinux/recipes-security/selinux/selinux-sandbox.inc
new file mode 100755
index 0000000..c8e335a
--- /dev/null
+++ b/cap/zx297520v3/sources/meta-selinux/recipes-security/selinux/selinux-sandbox.inc
@@ -0,0 +1,27 @@
+SUMMARY = "Run cmd under an SELinux sandbox"
+DESCRIPTION = "\
+Run application within a tightly confined SELinux domain. The default \
+sandbox domain only allows applications the ability to read and write \
+stdin, stdout and any other file descriptors handed to it."
+
+SECTION = "base"
+LICENSE = "GPLv2+"
+
+SRC_URI += "file://sandbox-de-bashify.patch \
+"
+
+DEPENDS += "libcap-ng libselinux"
+
+RDEPENDS_${PN} += "\
+ python3-core \
+ python3-math \
+ python3-shell \
+ python3-unixadmin \
+ libselinux-python \
+ selinux-python \
+"
+
+FILES_${PN} += "\
+ ${datadir}/sandbox/sandboxX.sh \
+ ${datadir}/sandbox/start \
+"