Ensure SELinux label policy is applied when merging image layers

ostreedev · May 21, 2024 · 0ab73f9 · 0ab73f9
1 parent 9a4743a
commit 0ab73f9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/src/container/store.rs b/lib/src/container/store.rs
@@ -973,6 +973,7 @@ impl ImageImporter {
                 let modifier =
                     ostree::RepoCommitModifier::new(ostree::RepoCommitModifierFlags::CONSUME, None);
                 modifier.set_devino_cache(&devino);
+                modifier.set_sepolicy_from_commit(&repo, &base_commit, cancellable)?;
 
                 let mt = ostree::MutableTree::new();
                 repo.write_dfd_to_mtree(