This repository has been archived by the owner on May 30, 2023. It is now read-only.
selinux: upgrade selinux libs #1048
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
tormath1
force-pushed
the
tormath1/selinux
branch
4 times, most recently
from
08a8c3c
to
2853e14
Compare
tormath1
changed the title
This was referenced Jun 11, 2021
tormath1
force-pushed
the
tormath1/selinux
branch
from
718d119
to
2399efb
Compare
|
Build fails like that: |
|
@dongsupark thanks, I forgot to remove this patch. Actually it has been moved from |
added 9 commits
July 6, 2021 15:57
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
backported from CoreOS commits Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
tormath1
force-pushed
the
tormath1/selinux
branch
from
5c464b3
to
9d7353f
Compare
|
Rebased with |
dongsupark
reviewed
Jul 15, 2021
| if use extra ; then | ||
| S="${S2}" | ||
| python_copy_sources | ||
| fi |
There was a problem hiding this comment.
Just thought.
Ideally we should contribute to Gentoo code like that, making USE flags to exclude unnecessary parts.
Of course that would be a long term project. So for now it is ok.
There was a problem hiding this comment.
I'm not a big fan of this extra USE flag - but yeah we could definitely try to provide more granular control on this kind of part.
added 5 commits
July 16, 2021 10:03
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
- run sshd (and child) as unconfined_t - add init.patch to allow execute_no_trans,map and exec from init to unconfined - add AVC patch for local login and journald Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
from 4.x setools is a pure python script, we won't include it in Flatcar anymore Signed-off-by: Mathieu Tortuyaux <mathieu@kinvolk.io>
Updates to dbus-1.12.20-r1 Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
Signed-off-by: Sayan Chowdhury <sayan@kinvolk.io>
This reverts commit 956f975.
tormath1
force-pushed
the
tormath1/selinux
branch
from
9d7353f
to
0cff4d9
Compare
|
@dongsupark thanks for the review - commits squash and rearranged :) |
dongsupark
approved these changes
Jul 16, 2021
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
this PR is based on #347 but it has been adapted to match flatcar git commit workflow and to clean the git history
as it's quite a big PR, we can split it into smaller ones
Note for reviewers
setoolsupgrade from 3 to 4 is fun (https://github.com/SELinuxProject/setools/wiki/Changes-Since-SETools-v3) (rewrite from C to Python).IDK yet how we can include this scripts into the OS 🤔we won't ship it anymoreTodo
(according to selinux repository, this scripts should only be "helpers")
selinux-unconfinedseems to be able to move into::portage-stableTesting done
closes flatcar/Flatcar#305, (and certainly other SELinux related issues - need to pass through)