sys-kernel/genkernel: Improve SELinux compatibility

Package-Manager: Portage-2.3.80, Repoman-2.3.19
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
This commit is contained in:
Thomas Deutschmann
2019-12-06 16:35:43 +01:00
parent 22c18dd1b1
commit ec9a316d0b
2 changed files with 56 additions and 0 deletions

View File

@@ -0,0 +1,54 @@
From a611a39cabab9836b51d1fc4326c3747cbdcd29a Mon Sep 17 00:00:00 2001
From: Mark Wright <gienah@gentoo.org>
Date: Fri, 6 Dec 2019 16:23:51 +0100
Subject: Improve SELinux compatibility
Closes: https://bugs.gentoo.org/697074
Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
---
gen_funcs.sh | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/gen_funcs.sh b/gen_funcs.sh
index 107f02b..f5dd0cd 100755
--- a/gen_funcs.sh
+++ b/gen_funcs.sh
@@ -728,7 +728,7 @@ dropbear_create_key() {
if isTrue "${SANDBOX}"
then
- envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+ envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
fi
# set up worker signal handler
@@ -805,7 +805,7 @@ dropbear_generate_key_info_file() {
if isTrue "${SANDBOX}"
then
- envvars+=( SANDBOX_WRITE="${LOGFILE}:${TEMP}" )
+ envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
fi
# set up worker signal handler
@@ -1397,7 +1397,7 @@ gkbuild() {
if isTrue "${SANDBOX}"
then
- envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+ envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
fi
# set up gkbuild signal handler
@@ -1452,7 +1452,7 @@ unpack() {
if isTrue "${SANDBOX}"
then
- envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}'" )
+ envvars+=( "SANDBOX_WRITE='${LOGFILE}:${TEMP}:/proc/thread-self/attr/fscreate'" )
fi
# set up unpack signal handler
--
cgit v1.2.1

View File

@@ -109,6 +109,8 @@ if [[ ${PV} == 9999* ]]; then
DEPEND="${DEPEND} app-text/asciidoc"
fi
PATCHES=( "${FILESDIR}"/${P}-improve-selinux-compatibility.patch )
src_unpack() {
if [[ ${PV} == 9999* ]]; then
git-r3_src_unpack