Increase selinux coverage of the host system #2849
Draft
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
a0f3db3 to
b2a06ed
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
e5f476b to
f53a575
Compare
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
It's from Gentoo commit 1d834aa9c6f8d981b720a18aa74907f84e9e27bf.
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
b9a1d06 to
999890a
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
999890a to
6f6bbe8
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
6f6bbe8 to
61ef7d4
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
61ef7d4 to
2fe435d
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
2fe435d to
e3b0915
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
e3b0915 to
783c103
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
783c103 to
af5fb28
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
af5fb28 to
b15c808
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
b15c808 to
2d50642
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
3b24cb9 to
fec55ca
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
fec55ca to
19b8b6f
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
19b8b6f to
8521010
Compare
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
8521010 to
3d006d6
Compare
Switching to a selinux profile caused more USE flags to be enabled (selinux, audit, caps), thus more dependencies to be pulled. More dependencies caused two things: - cyclic dependencies appeared - sys-apps/baselayout is being pulled in Cyclic dependencies need to be handled in a similar way it was done in build_packages, thus factor out the code doing it into a separate and reusable part. The dependency on baselayout needs to be handled by installing the package as a first thing in $ROOT, followed by a more careful way of copying things from $SYSROOT to $ROOT (due to split-usr differences), followed by installing the rest of the packages.
krnowak
force-pushed
the
krnowak/selinux-coverage
branch
from
3d006d6 to
4e5c37e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/sdk/2052/cldsv/
TODO: