mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-07 04:56:58 +02:00
Ensure that selinux policy is installed in correct location
Failing to explicitly set the selinux policy store to operate on may result in semodule installing the policy in an incorrect location. Pass it on the command line in order to avoid this.
This commit is contained in:
parent
bf6f1af354
commit
673f166013
@ -321,7 +321,7 @@ finish_image() {
|
||||
|
||||
# Build the selinux policy
|
||||
if pkg_use_enabled coreos-base/coreos selinux; then
|
||||
sudo chroot "${root_fs_dir}" bash -c "cd /usr/share/selinux/mcs && semodule -i *.pp"
|
||||
sudo chroot "${root_fs_dir}" bash -c "cd /usr/share/selinux/mcs && semodule -s mcs -i *.pp"
|
||||
fi
|
||||
|
||||
# We only need to disable rw and apply dm-verity in prod with a /usr partition
|
||||
|
Loading…
Reference in New Issue
Block a user