Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

profiles: enable selinux for tar,coreutils for sdk profile #55

Merged
merged 1 commit into from Aug 1, 2019

Conversation

@dongsupark
Copy link
Contributor

commented Jul 31, 2019

To be able to fix the issue of torcx tarballs not being able to have selinux contexts, we need to enable selinux for the sdk profile.

Also enable selinux for tar package in the generic profile.

profiles: enable selinux for tar,coreutils for sdk profile
To be able to fix the issue of torcx tarballs not being able to
have selinux contexts, we need to enable selinux for the sdk profile.
Also enable selinux for tar package in the generic profile.

@dongsupark dongsupark added the bug label Jul 31, 2019

dongsupark added a commit to flatcar-linux/torcx that referenced this pull request Jul 31, 2019

internal: enable XattrPrivileged for untar to fix selinux issue
To be able to extract tarballs with selinux contexts, torcx needs to
turn on `XattrPrivileged`, because the default `XattrUser` option
is able to extract only selinux contexts starts with `user` prefix.

See also:
flatcar-linux/coreos-overlay#55
flatcar-linux/scripts#16
@invidian
Copy link
Member

left a comment

Seems OK

dongsupark added a commit to flatcar-linux/torcx that referenced this pull request Jul 31, 2019

internal: enable XattrPrivileged for untar to fix selinux issue
To be able to extract tarballs with selinux contexts, torcx needs to
turn on `XattrPrivileged`, because the default `XattrUser` option
is able to extract only selinux contexts starting with `user` prefix.

See also:
flatcar-linux/coreos-overlay#55
flatcar-linux/scripts#16

@dongsupark dongsupark merged commit cb7defb into flatcar-master Aug 1, 2019

@dongsupark dongsupark deleted the dongsu/enable-selinux-sdk branch Aug 1, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants
You can’t perform that action at this time.