From 6077a10ae5a523751ff5c8e73b4b1b6adfc4e0d8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Tue, 24 Dec 2024 04:57:24 +0100
Subject: [PATCH] rpm: adjust SELinux snippets for relabeling

Adjust according to https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Creating_the_Spec_File

Specifically, when %selinux_relabel_post is used, %selinux_relabel_pre
needs to be there too.

QubesOS/qubes-issues#9663
---
 rpm_spec/qubes-qrexec-vm.spec.in | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/rpm_spec/qubes-qrexec-vm.spec.in b/rpm_spec/qubes-qrexec-vm.spec.in
index 6f5bdc57..c26dbb18 100644
--- a/rpm_spec/qubes-qrexec-vm.spec.in
+++ b/rpm_spec/qubes-qrexec-vm.spec.in
@@ -97,6 +97,9 @@ rm -f %{name}-%{version}
 %preun
 %systemd_preun qubes-qrexec-agent.service
 
+%pre selinux
+%selinux_relabel_pre
+
 %post selinux
 %selinux_modules_install %{_datadir}/selinux/packages/qubes-core-qrexec.pp || :