policycoreutils semodule fix: add bugfix changelog

Signed-off-by: Thilo Fromm <thilo@kinvolk.io>
This commit is contained in:
Thilo Fromm 2021-12-16 18:48:06 +01:00
parent 99ab4bc73c
commit 6038166dc1

View File

@ -0,0 +1,10 @@
The policycoreutils ebuild calls semodule in postinst to update SELinux stores.
It does not, however, tells semodule the correct ROOT to use, so builds that go into /build/[arch]-usr end up updating the SDK's store.
This patch resolves the following error message:
```
$ emerge-amd64-usr policycoreutils
[...]
libsemanage.semanage_commit_sandbox: Error while renaming /var/lib/selinux/targeted/active to /var/lib/selinux/targeted/previous. (Invalid cross-device link)
```
The error is observed when using the SDK Container to build an OS image.
The `semanage` run in policycoreutilsi' `postinst` now also updates the correct store, which it previously did not.