diff --git a/sdk_container/src/third_party/portage-stable/eclass/selinux-policy-2.eclass b/sdk_container/src/third_party/portage-stable/eclass/selinux-policy-2.eclass index e8b7ef863a..5ec7ff99ed 100644 --- a/sdk_container/src/third_party/portage-stable/eclass/selinux-policy-2.eclass +++ b/sdk_container/src/third_party/portage-stable/eclass/selinux-policy-2.eclass @@ -1,4 +1,4 @@ -# Copyright 1999-2024 Gentoo Authors +# Copyright 1999-2025 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 # Eclass for installing SELinux policy, and optionally @@ -104,15 +104,20 @@ fi LICENSE="GPL-2" SLOT="0" S="${WORKDIR}/" + +# @ECLASS_VARIABLE: PATCHBUNDLE +# @INTERNAL +# @DESCRIPTION: +# Path to Gentoo Hardened Refpol patch to apply on top of upstream PATCHBUNDLE="${DISTDIR}/patchbundle-selinux-base-policy-${BASEPOL}.tar.bz2" # Modules should always depend on at least the first release of the # selinux-base-policy for which they are generated. if [[ -n ${BASEPOL} ]]; then - RDEPEND=">=sys-apps/policycoreutils-2.0.82 + RDEPEND=">=sys-apps/policycoreutils-2.5 >=sec-policy/selinux-base-policy-${BASEPOL}" else - RDEPEND=">=sys-apps/policycoreutils-2.0.82 + RDEPEND=">=sys-apps/policycoreutils-2.5 >=sec-policy/selinux-base-policy-${PV}" fi @@ -279,15 +284,11 @@ selinux-policy-2_pkg_postinst() { semodule ${root_opts} -s ${i} -i ${COMMAND} if [[ $? -ne 0 ]]; then ewarn "SELinux module load failed. Trying full reload..."; - local COMMAND_base="-i base.pp" - if has_version "