anders/os-63245
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Revert "SE policy test"

Browse source 
This reverts commit 73798e518e.
This commit is contained in:
Anders da Silva Rytter Hansen 2026-06-30 16:36:09 -03:00
commit 6ecad0c5c4
2 changed files with 1 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Dockerfile
View file

@ -13,7 +13,7 @@ RUN dnf config-manager --add-repo https://copr.fedorainfracloud.org/coprs/g/xlib
# This may be necessary for the speakers and internal microphone
RUN dnf install -y alsa-sof-firmware
RUN dnf install xorg-x11-xinit xkbcomp xinput xlibre-xserver-Xorg xlibre-xserver-common xlibre-xf86-input-libinput cage weston xrandr -y
RUN dnf install xorg-x11-xinit xorg-x11-xinit-session xkbcomp xinput xlibre-xserver-Xorg xlibre-xserver-common xlibre-xf86-input-libinput cage weston xrandr -y
RUN dnf install --allowerasing -y \
sonic-workspace \
@ -29,14 +29,6 @@ RUN dnf install --allowerasing -y sonic-keybind-daemon sonic-frameworks-windowsy
RUN dnf remove -y sddm && \
dnf install --allowerasing -y sonic-login-manager
RUN dnf install -y selinux-policy-devel checkpolicy
COPY selinux/plasmalogin-selinux.te /tmp/plasmalogin-selinux.te
RUN checkmodule -M -m -o /tmp/plasmalogin-selinux.mod /tmp/plasmalogin-selinux.te && \
semodule_package -o /tmp/plasmalogin-selinux.pp -m /tmp/plasmalogin-selinux.mod && \
semodule -i /tmp/plasmalogin-selinux.pp && \
rm -f /tmp/plasmalogin-selinux.*
RUN dnf install -y fish distrobox nvtop intel-media-driver libva-intel-driver htop firefox
# Remove plocate to avoid updatedb going crazy with scanning the file system once a day

12
selinux/plasmalogin-selinux.te
View file

@ -1,12 +0,0 @@
module plasmalogin-selinux 1.0;
require {
type unconfined_t;
type xdm_exec_t;
class file { entrypoint execute };
}
# Allow the plasmalogin process to execute the X11 user helper binary
# which is labeled as xdm_exec_t. This is needed when the plasmalogin
# daemon is not running in the xdm_t domain on SELinux enforcing systems.
allow unconfined_t xdm_exec_t:file { entrypoint execute };