From 7f3fd8cf61cbe705b903f51fb22b2a1c9e07d2b2 Mon Sep 17 00:00:00 2001 From: Krzesimir Nowak Date: Fri, 20 Mar 2026 15:11:28 +0100 Subject: [PATCH] overlay coreos/config: Disable SELinux in config for SDK Signed-off-by: Krzesimir Nowak --- .../coreos-overlay/coreos/config/env/sec-policy/selinux-base | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 sdk_container/src/third_party/coreos-overlay/coreos/config/env/sec-policy/selinux-base diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sec-policy/selinux-base b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sec-policy/selinux-base new file mode 100644 index 0000000000..3f8bd09b3b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sec-policy/selinux-base @@ -0,0 +1,5 @@ +cros_post_src_install_disable_on_sdk() { + if [[ $(flatcar_target) = 'sdk' ]] ; then + sed -i -e 's/SELINUX=permissive/SELINUX=disabled/' "${ED}"/etc/selinux/config + fi +}