projects / ostree.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6bf4b3e) | patch
deploy: SELinux-relabel installed kernel/initramfs data
authorColin Walters <walters@verbum.org>
Fri, 2 Feb 2018 18:46:15 +0000 (13:46 -0500)
committerAtomic Bot <atomic-devel@projectatomic.io>
Fri, 2 Feb 2018 22:32:49 +0000 (22:32 +0000)
commit4a98a86b7238f13881c8615b4435ae828c7068f3
treea59b4411db346dcd1c4777c509dfca88e6e73030tree | snapshot
parent6bf4b3e1d8ae0173f3f97a26990a6a6341c11049commit | diff
deploy: SELinux-relabel installed kernel/initramfs data

When we changed around the kernel location in rpm-ostree, we
started installing the kernel into `/boot` as `modules_object_t`,
and the current policy didn't permit that.  For maximum compatibility,
relabel installed kernel/initramfs/dtb as `boot_t`.

https://bugzilla.redhat.com/show_bug.cgi?id=1536991

Closes: #1444
Approved by: jlebon
src/libostree/ostree-sysroot-deploy.c diff | blob | history
tests/installed/itest-deploy-selinux.sh diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.