Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

libostree: write selinux xattr when on non-selinux systems #3151

Merged
merged 2 commits into from
Feb 8, 2024
Merged

libostree: write selinux xattr when on non-selinux systems #3151

merged 2 commits into from
Feb 8, 2024

Commits on Feb 8, 2024

  1. libostree: write selinux xattr when on non-selinux systems 

    Currently when writing data for selinux systems on a non-selinux
system there will be no labels. This is because
`ostree_sepolicy_setfscreatecon()` just returns TRUE on non-selinux
systems and xattr writing for `security.seliux` is filtered out.

This patches uses the suggestion of Colin Walters (thanks!) from
ostreedev#2804 and detects if
the host has selinux enabled and if not just skips filtering the
xattrs for selinux.
    @mvo5
    mvo5 committed Feb 8, 2024
    Configuration menu
    Copy the full SHA
    092a2b7 View commit details
    Browse the repository at this point in the history

  2. ci: Use BOOTC_SKIP_SELINUX_HOST_CHECK, test labeling of /etc 

    As we work to change ostree to set up the labels
for things even in a selinux-host-disabled case, let's test
it here.
    @cgwalters @mvo5
    cgwalters authored and mvo5 committed Feb 8, 2024
    Configuration menu
    Copy the full SHA
    5cfc5c7 View commit details
    Browse the repository at this point in the history