Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP - dist git files #2359

Open
wants to merge 7 commits into
base: c10s
Choose a base branch
from

Conversation

bachradsusi
Copy link
Member

Backport rawhide changes related to move of dist git files to this repository

bachradsusi and others added 7 commits September 20, 2024 19:43
The content of these files is more or less tied to the policy source
code. Therefore, moving these files to the source repo rather than
dist-git will make it easier to do changes that would formerly need
coordinated modification both in the sources and in dist-git (e.g.
adding or removing a module). It will also make it easier for other
distributions seeking to package a Fedora-like SELinux policy.

Those files that correspond to existing config/ files are just updated
locally to match what would be applied in dist-git; the rest is placed
into the new dist/ subdirectory. For better maintainability, files for
the different policy variants (targeted, minimum, mls) are placed into
separate subdirectories.

This will be followed up with a dist-git patch that converts it to use
the config files from sources rather than from dist-git.

Signed-off-by: Ondrej Mosnacek <[email protected]>
Remove types that are just aliases of user_tty_device_t and add
console_device_t also to config/appconfig-standard/securetty_types.

Also note that secureadm_tty_device_t was a misspelling of
secadm_tty_device_t - such type doesn't exist in the policy at all.

Signed-off-by: Ondrej Mosnacek <[email protected]>
Fixes a deprecation warning:

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
- add gnome_remote_desktop to targeted modules.conf
- use symlinks to dist/targeted for default users
- drop policy/modules.conf - it's generated by `make conf`
- fix typo in users files
policy/modules.conf was droped and needs to be generated
or copied from dist/ during build.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants