overlay: update selinux update script from 05rhcos

remove version check from script so that it will run in fcos
openshift · Apr 18, 2023 · 7249872 · 7249872
1 parent 1d969f9
commit 7249872
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/overlay.d/99okd/usr/libexec/rhcos-rebuild-selinux-policy b/overlay.d/99okd/usr/libexec/rhcos-rebuild-selinux-policy
@@ -0,0 +1,9 @@
+#!/bin/bash
+# Executed by rhcos-selinux-policy-upgrade.service
+set -euo pipefail
+
+ls -al /{usr/,}etc/selinux/targeted/policy/policy.31
+if ! cmp --quiet /{usr/,}etc/selinux/targeted/policy/policy.31; then
+    echo "Recompiling policy due to local modifications as workaround for https://bugzilla.redhat.com/2057497"
+    semodule -B
+fi