mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2026-04-15 10:31:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

overlay profiles: Build only the mcs SELinux policy

Browse Source 
Building multiple policies is pointless - changing the policy at
runtime would require relabeling the filesystem, which will not work,
because /usr is read-only.

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
This commit is contained in:
Krzesimir Nowak 2025-10-08 12:21:08 +02:00
parent 7a818b053d
commit eaaed3bba6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults vendored
View File

@ -53,8 +53,8 @@ BOOTSTRAP_USE="${BOOTSTRAP_USE} curl_ssl_openssl ssl"
BOOTSTRAP_USE="${BOOTSTRAP_USE} xml"
# Set SELinux policy
POLICY_TYPES="targeted mcs mls"
SELINUX_POLICY_TYPES="targeted mcs mls"
POLICY_TYPES="mcs"
SELINUX_POLICY_TYPES="mcs"
# Disable packages or optional features with distribution issues.
ACCEPT_RESTRICT="* -bindist"