public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/selinux-policy] f45: Remove the 0001-Support-console-version-of-initial-setup.patch
@ 2026-09-07 21:23 Zdenek Pytela
0 siblings, 0 replies; only message in thread
From: Zdenek Pytela @ 2026-09-07 21:23 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/selinux-policy
Branch : f45
Commit : 3ede35ee270cb49afb874aa31ca634c0579ca990
Author : Zdenek Pytela <zpytela@redhat.com>
Date : 2026-09-07T18:08:00+02:00
Stats : +0/-52 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/selinux-policy/c/3ede35ee270cb49afb874aa31ca634c0579ca990?branch=f45
Log:
Remove the 0001-Support-console-version-of-initial-setup.patch
The patch was considered a temporary workaround until the fix is present
in selinux-policy.
---
diff --git a/0001-Support-console-version-of-initial-setup.patch b/0001-Support-console-version-of-initial-setup.patch
deleted file mode 100644
index f5f601a..0000000
--- a/0001-Support-console-version-of-initial-setup.patch
+++ /dev/null
@@ -1,47 +0,0 @@
-From 3b83c9107365b8484a37731d5da87ef29dc2787a Mon Sep 17 00:00:00 2001
-From: Zdenek Pytela <zpytela@redhat.com>
-Date: Tue, 1 Sep 2026 21:41:45 +0200
-Subject: [PATCH] Support console version of initial-setup
-
-kmscon spawns scripts in /usr/libexec/initial-setup, so:
-Label /usr/libexec/initial-setup with install_exec_t.
-Allow kmscon run install_t executables with a domain transition.
-
-Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2484542
----
- policy/modules/contrib/anaconda.fc | 2 ++
- policy/modules/contrib/kmscon.te | 4 ++++
- 2 files changed, 6 insertions(+)
-
-diff --git a/policy/modules/contrib/anaconda.fc b/policy/modules/contrib/anaconda.fc
-index 28d774a3c..17fd0dd57 100644
---- a/policy/modules/contrib/anaconda.fc
-+++ b/policy/modules/contrib/anaconda.fc
-@@ -7,7 +7,9 @@
- /usr/bin/bootc -- gen_context(system_u:object_r:install_exec_t,s0)
- /usr/bin/ostree -- gen_context(system_u:object_r:install_exec_t,s0)
- /usr/bin/rpm-ostree -- gen_context(system_u:object_r:install_exec_t,s0)
-+
- /usr/libexec/rpm-ostreed -- gen_context(system_u:object_r:install_exec_t,s0)
-+/usr/libexec/initial-setup(/.*)? -- system_u:object_r:install_exec_t:s0
-
- /usr/bin/preupg.* -- gen_context(system_u:object_r:preupgrade_exec_t,s0)
- /var/lib/preupgrade(/.*)? gen_context(system_u:object_r:preupgrade_data_t,s0)
-diff --git a/policy/modules/contrib/kmscon.te b/policy/modules/contrib/kmscon.te
-index 46bc0723a..b8f565d3e 100644
---- a/policy/modules/contrib/kmscon.te
-+++ b/policy/modules/contrib/kmscon.te
-@@ -74,6 +74,10 @@ miscfiles_manage_fonts_cache(kmscon_t)
- # Open the tty, so that it can be handed over to the seat manager
- term_use_unallocated_ttys(kmscon_t)
-
-+optional_policy(`
-+ anaconda_domtrans_install(kmscon_t)
-+')
-+
- optional_policy(`
- # Allow domtrans to agetty using --login
- # see https://github.com/Aetf/kmscon/commit/21cf668c58867a100272adea6f323cd56fc73e78
---
-2.55.0
-
diff --git a/selinux-policy.spec b/selinux-policy.spec
index a23779f..7096331 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -54,11 +54,6 @@ Source39: selinux-policy-mls.conf
# Script to convert /usr/sbin file context entries to /usr/bin
Source40: binsbin-convert.sh
-# https://bugzilla.redhat.com/show_bug.cgi?id=2484542
-# https://github.com/fedora-selinux/selinux-policy/pull/3396
-# Fix denials for initial-setup on kmscon
-Patch: 0001-Support-console-version-of-initial-setup.patch
-
# add_changelog
%{load:%{SOURCE7}}
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-07 21:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-07 21:23 [rpms/selinux-policy] f45: Remove the 0001-Support-console-version-of-initial-setup.patch Zdenek Pytela
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox