Matthew Garrett ce550930d0 sec-policy: Permit execmem in selinux policy ...

polkit is failing when selinux is enforcing as it is attempting to mmap
pages as both writable and executable and selinux is forbidding this.
Since we want selinux for container isolation rather than general system
confinement, the easiest fix for now is to just add the selinux boolean
to permit execmem.

The selinux eclass is modified to hardcode the gentoo patchset that we're
basing our policy on - otherwise bumping the revision for our local
builds tries to pull down versions that don't exist.

2016-05-05 13:32:57 +01:00

..

src/third_party/coreos-overlay

sec-policy: Permit execmem in selinux policy

2016-05-05 13:32:57 +01:00