mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-12-09 19:31:54 +01:00
Code Issues Packages Projects Releases Wiki Activity

Build selinux policy

Browse Source 
Create an selinux policy at image build time - despite the -i flag, this
won't attempt to install it into the running kernel.
This commit is contained in:
Matthew Garrett 2015-06-24 16:45:10 -07:00
parent b38b214254
commit 14163c3c0a
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
build_library/build_image_util.sh
View File

@ -298,6 +298,11 @@ finish_image() {
sudo fstrim "${root_fs_dir}/usr" || true
fi
# Build the selinux policy
if [[ "$BOARD" = amd64* ]]; then
sudo chroot ${root_fs_dir} bash -c "cd /usr/share/selinux/mcs; semodule -i *.pp"
fi
# Sign the kernels after /usr is in a consistent state
if [[ ${COREOS_OFFICIAL:-0} -ne 1 ]]; then
sudo sbsign --key /usr/share/sb_keys/DB.key \