Sync from SUSE:SLFO:Main selinux-policy revision bb4f7fb6bc45c0b731185cf101ecb37e

This commit is contained in:
Adrian Schröter 2024-12-04 09:27:19 +01:00
parent 79cd209949
commit 860c67d1e5
2 changed files with 14 additions and 3 deletions

View File

@ -117,9 +117,13 @@ if [ -z "${_policytype}" ]; then \
_policytype="targeted" \
fi \
if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
if [ -f %{_file_context_file_pre} ] && [ -z "${TRANSACTIONAL_UPDATE}" ]; then \
%{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \
rm -f %{_file_context_file_pre} \
if [ -f %{_file_context_file_pre} ]; then \
if [ -z "${TRANSACTIONAL_UPDATE}" ]; then \
%{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \
rm -f %{_file_context_file_pre} \
else \
touch /etc/selinux/.autorelabel \
fi \
fi \
fi \
%{nil}

View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Nov 29 10:18:47 UTC 2024 - Johannes Segitz <jsegitz@suse.com>
- Update macros.selinux-policy to trigger a full relabel on transactional
systems upon module installation. This is rather expensive and will
hopefully be replaced by a more fine grained solution later on (bsc#1232753)
-------------------------------------------------------------------
Tue Nov 05 16:21:25 UTC 2024 - cathy.hu@suse.com