From c5655c9006eec843f8d51e689b739df48de3effe Mon Sep 17 00:00:00 2001 From: Michael Vogt Date: Wed, 20 Mar 2024 17:02:04 +0100 Subject: [PATCH] osbuild: make the entire /etc/selinux avaialble for the buildroot When moving to `bootc install to-filesystem` we need more information for bootc from /etc/selinux than our current /etc/selinux/targeted/contexts policy. This commit makes all of /etc/selinux available which unblocks the bootc install. --- osbuild/buildroot.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/osbuild/buildroot.py b/osbuild/buildroot.py index bd8dded0..02b1b9f2 100644 --- a/osbuild/buildroot.py +++ b/osbuild/buildroot.py @@ -246,8 +246,8 @@ class BuildRoot(contextlib.AbstractContextManager): os.path.join(self._rootdir, "ostree"), "/ostree"] mounts += ["--ro-bind-try", - os.path.join(self._rootdir, "etc/selinux/targeted/contexts"), - "/etc/selinux/targeted/contexts"] + os.path.join(self._rootdir, "etc/selinux/"), + "/etc/selinux/"] # We execute our own modules by bind-mounting them from the host into # the build-root. We have minimal requirements on the build-root, so