public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Zdenek Pytela <zpytela@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/selinux-policy] rawhide: Remove the 0001-Support-console-version-of-initial-setup.patch
Date: Mon, 07 Sep 2026 21:20:59 GMT [thread overview]
Message-ID: <178881605926.1.18104891443058583071.rpms-selinux-policy-9c95cce76d67@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/selinux-policy
Branch : rawhide
Commit : 9c95cce76d67ca816ab1e1e2f27dd7cefa533b2d
Author : Zdenek Pytela <zpytela@redhat.com>
Date : 2026-09-07T18:01:32+02:00
Stats : +0/-52 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/selinux-policy/c/9c95cce76d67ca816ab1e1e2f27dd7cefa533b2d?branch=rawhide
Log:
Remove the 0001-Support-console-version-of-initial-setup.patch
The patch was considered a temporary workaround until the fix is present
in selinux-policy.
---
diff --git a/0001-Support-console-version-of-initial-setup.patch b/0001-Support-console-version-of-initial-setup.patch
deleted file mode 100644
index f5f601a..0000000
--- a/0001-Support-console-version-of-initial-setup.patch
+++ /dev/null
@@ -1,47 +0,0 @@
-From 3b83c9107365b8484a37731d5da87ef29dc2787a Mon Sep 17 00:00:00 2001
-From: Zdenek Pytela <zpytela@redhat.com>
-Date: Tue, 1 Sep 2026 21:41:45 +0200
-Subject: [PATCH] Support console version of initial-setup
-
-kmscon spawns scripts in /usr/libexec/initial-setup, so:
-Label /usr/libexec/initial-setup with install_exec_t.
-Allow kmscon run install_t executables with a domain transition.
-
-Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2484542
----
- policy/modules/contrib/anaconda.fc | 2 ++
- policy/modules/contrib/kmscon.te | 4 ++++
- 2 files changed, 6 insertions(+)
-
-diff --git a/policy/modules/contrib/anaconda.fc b/policy/modules/contrib/anaconda.fc
-index 28d774a3c..17fd0dd57 100644
---- a/policy/modules/contrib/anaconda.fc
-+++ b/policy/modules/contrib/anaconda.fc
-@@ -7,7 +7,9 @@
- /usr/bin/bootc -- gen_context(system_u:object_r:install_exec_t,s0)
- /usr/bin/ostree -- gen_context(system_u:object_r:install_exec_t,s0)
- /usr/bin/rpm-ostree -- gen_context(system_u:object_r:install_exec_t,s0)
-+
- /usr/libexec/rpm-ostreed -- gen_context(system_u:object_r:install_exec_t,s0)
-+/usr/libexec/initial-setup(/.*)? -- system_u:object_r:install_exec_t:s0
-
- /usr/bin/preupg.* -- gen_context(system_u:object_r:preupgrade_exec_t,s0)
- /var/lib/preupgrade(/.*)? gen_context(system_u:object_r:preupgrade_data_t,s0)
-diff --git a/policy/modules/contrib/kmscon.te b/policy/modules/contrib/kmscon.te
-index 46bc0723a..b8f565d3e 100644
---- a/policy/modules/contrib/kmscon.te
-+++ b/policy/modules/contrib/kmscon.te
-@@ -74,6 +74,10 @@ miscfiles_manage_fonts_cache(kmscon_t)
- # Open the tty, so that it can be handed over to the seat manager
- term_use_unallocated_ttys(kmscon_t)
-
-+optional_policy(`
-+ anaconda_domtrans_install(kmscon_t)
-+')
-+
- optional_policy(`
- # Allow domtrans to agetty using --login
- # see https://github.com/Aetf/kmscon/commit/21cf668c58867a100272adea6f323cd56fc73e78
---
-2.55.0
-
diff --git a/selinux-policy.spec b/selinux-policy.spec
index a23779f..7096331 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -54,11 +54,6 @@ Source39: selinux-policy-mls.conf
# Script to convert /usr/sbin file context entries to /usr/bin
Source40: binsbin-convert.sh
-# https://bugzilla.redhat.com/show_bug.cgi?id=2484542
-# https://github.com/fedora-selinux/selinux-policy/pull/3396
-# Fix denials for initial-setup on kmscon
-Patch: 0001-Support-console-version-of-initial-setup.patch
-
# add_changelog
%{load:%{SOURCE7}}
reply other threads:[~2026-09-07 21:20 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178881605926.1.18104891443058583071.rpms-selinux-policy-9c95cce76d67@fedoraproject.org \
--to=zpytela@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox