Commits on Jun 4, 2024

1. repo: Don't try to perform labeling if SELinux is disabled …

   The default for container execution is that `/sys/fs/selinux`
   is not mounted, and the libselinux library function `is_selinux_enabled`
   should be used to dynamically check if the system should attempt to perform SELinux labeling.
   
   This is how it's done by rpm, ostree, and systemd for example.
   
   But this code unconditionally tries to label if it finds a policy,
   which breaks in an obscure corner case
   when executed inside a container that includes policy files (e.g.
   fedora/rhel-bootc) but when we're not using overlayfs for the backend
   (with BUILDAH_BACKEND=vfs).

   

   cgwalters committed Jun 4, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 098ec4f
   • Browse repository at this point

   Copy the full SHA

   098ec4f View commit details

   Browse the repository at this point in the history