Revert "Label /etc/cockpit/ws-certs.d with cert_t"

[zpytela]

This reverts commit 0ac09c6.

Unfortunately duplicate file context entries cannot co-exist
even in modules installed with a different priority.

[martinpitt]

@zpytela : Is there still something which either you or me need to do about the original issue? #856 has been stuck for a while, but is there anything wrt. ws-certs.d labels which is still broken right now?

Thank you!

[zpytela]

@zpytela : Is there still something which either you or me need to do about the original issue? #856 has been stuck for a while, but is there anything wrt. ws-certs.d labels which is still broken right now?

Thank you!

No, a new policy build is in CI pipeline and should be ready in a few hours.

[martinpitt]

I didn't mean that revert -- that's obviously the right thing to do for unbreaking the world. I meant for the original commit 0ac09c6 -- I suppose that was done for a reason, to fix https://bugzilla.redhat.com/show_bug.cgi?id=1907473 . My question is, is that actually still necessary? We ship our custom cockpit policy in RHEL 8 now, so I would have thought selinux-policy wouldn't have to care about this any more?

[zpytela]

I didn't mean that revert -- that's obviously the right thing to do for unbreaking the world. I meant for the original commit 0ac09c6 -- I suppose that was done for a reason, to fix https://bugzilla.redhat.com/show_bug.cgi?id=1907473 . My question is, is that actually still necessary? We ship our custom cockpit policy in RHEL 8 now, so I would have thought selinux-policy wouldn't have to care about this any more?

Absolutely, it was one of today's findings that cockpit's policy it is not in cockpit-selinux which had made me believe cockpit does not ship its own policy in RHEL 8.