1
0
mirror of https://passt.top/passt synced 2024-09-28 18:15:49 +00:00
passt/contrib/fedora
Stefano Brivio dd23496619 fedora: Refresh SELinux labels in scriptlets, require -selinux package
Instead of:
  https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft

follow this:
  https://fedoraproject.org/wiki/PackagingDrafts/SELinux_Independent_Policy

which seems to make more sense and fixes the issue that, on a fresh
install, without a reboot, the file contexts for the binaries are not
actually updated.

In detail:

- labels are refreshed using the selinux_relabel_pre and
  selinux_relabel_post on install, upgrade, and uninstall

- use the selinux_modules_install and selinux_modules_uninstall
  macros, instead of calling 'semodule' directly (no functional
  changes in our case)

- require the -selinux package on SELinux-enabled environments and if
  the current system policy is "targeted"

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2023-03-17 08:26:07 +01:00
..
passt.spec fedora: Refresh SELinux labels in scriptlets, require -selinux package 2023-03-17 08:26:07 +01:00
rpkg.conf contrib/fedora: Use pre-processing macros in spec file 2022-06-08 09:43:48 +02:00
rpkg.macros fedora: Escape % characters in spec file's changelog 2022-09-07 11:01:22 +02:00