diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2023-03-16 20:51:23 +0100 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-03-17 08:26:07 +0100 |
| commit | dd2349661933c4e9756e524ae9465f38b53b7557 (patch) | |
| tree | ca5ff3816890bc6c53f9c1a3e9734c1f459c3901 /isolation.c | |
| parent | 87a655045bf2631a10c44a3d41090bd289f34525 (diff) | |
| download | passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar.gz passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar.bz2 passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar.lz passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar.xz passt-dd2349661933c4e9756e524ae9465f38b53b7557.tar.zst passt-dd2349661933c4e9756e524ae9465f38b53b7557.zip | |
fedora: Refresh SELinux labels in scriptlets, require -selinux package2023_03_17.dd23496
Instead of:
https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft
follow this:
https://fedoraproject.org/wiki/PackagingDrafts/SELinux_Independent_Policy
which seems to make more sense and fixes the issue that, on a fresh
install, without a reboot, the file contexts for the binaries are not
actually updated.
In detail:
- labels are refreshed using the selinux_relabel_pre and
selinux_relabel_post on install, upgrade, and uninstall
- use the selinux_modules_install and selinux_modules_uninstall
macros, instead of calling 'semodule' directly (no functional
changes in our case)
- require the -selinux package on SELinux-enabled environments and if
the current system policy is "targeted"
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'isolation.c')
0 files changed, 0 insertions, 0 deletions