debian-forge/selinux/osbuild.fc
Tomáš Hozza e90a74f088 SELinux: apply osbuild_exec_t to /usr/bin/osbuild-image-info
This is needed, for the tool to be able to read SELinux labels from the
inspected image, which are not known to the host on which it is running.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2024-12-18 12:50:32 +01:00

5 lines
392 B
Text

/usr/bin/osbuild -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/bin/osbuild-image-info -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/assemblers/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/stages/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)
/usr/lib/osbuild/sources/.* -- gen_context(system_u:object_r:osbuild_exec_t,s0)