cockpit-selinux-policies
This prevents a major issue where cockpit-selinux-policies would have
postun trigger *after* cockpit-ws-selinux was installed, meaning that
the policy would then be removed, breaking cockpit
Glibc provides /etc/nsswitch.conf but doesn't update it after first
install. This adds a check to ensure we have systemd dynamic support
present before running as we need dynamic users and a out of date
nsswitch overrides the up to date file in /usr/etc/ breaking support.
Cockpit expects all its users to be dynamic, if we aren't creating them
manually and instead using them as dynamic users as upstream expects we
need to ensure they don't exist. This adds a preexec script that does
that.
Updates cockpit to version 337. This version includes breaking changes
related to usage of patternfly 6. 3 patches were updated to be used with
the new cockpit release
Patch 108(0007-Remove-DynamicUser-setting-as-these-conflict-with-re.patch)
sets DynamicUser to no,This should have also set PrivateTmp and
ProtectHome to yes. This patch should have also only been applied on
Leap 15 as tumbleweed does have dynamic users.
See https://github.com/cockpit-project/bots/issues/7699 for motivation
This resolves bsc#1236057 by moving the selinux policies in cockpit-ws
to cockpit-selinux-policies allowing them to be conditionally installed
when selinux-policy-base is installed.
- suse_docs.patch: update documentation to point at new links (bsc#1226050)
- remove_rh_links.patch: remove additional hardcoded RH refs (bsc#1221336)
- hide-pcp.patch: correct patch to properly disable pcp on micro
(bsc#1226049)
- suse-microos-branding.patch: use suse ID as branding instead of sle-micro
(bsc#1227441)