anders/os-63245
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Compare commits

base: anders:73798e518eeae368f871f00197cd175fba0cf390
Branches Tags
anders:main
anders:custom-chromium-flags
..
compare: anders:b8c1977874f0c75e3ff3d7dca8f12a1177398574
Branches Tags
anders:main
anders:custom-chromium-flags

2 commits
73798e518e ... b8c1977874

Author SHA1 Message Date
Anders da Silva Rytter Hansen
b8c1977874 Revert "add xorg-x11-xinit-session"
All checks were successful
os / build (push) Successful in 12m26s
Details 
This reverts commit 01cb23083b.
 2026-06-30 16:36:26 -03:00
Anders da Silva Rytter Hansen
6ecad0c5c4 Revert "SE policy test" 
This reverts commit 73798e518e.
 2026-06-30 16:36:09 -03:00
2 changed files with 0 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

8
Dockerfile
View file

@ -29,14 +29,6 @@ RUN dnf install --allowerasing -y sonic-keybind-daemon sonic-frameworks-windowsy
RUN dnf remove -y sddm && \
dnf install --allowerasing -y sonic-login-manager
RUN dnf install -y selinux-policy-devel checkpolicy
COPY selinux/plasmalogin-selinux.te /tmp/plasmalogin-selinux.te
RUN checkmodule -M -m -o /tmp/plasmalogin-selinux.mod /tmp/plasmalogin-selinux.te && \
semodule_package -o /tmp/plasmalogin-selinux.pp -m /tmp/plasmalogin-selinux.mod && \
semodule -i /tmp/plasmalogin-selinux.pp && \
rm -f /tmp/plasmalogin-selinux.*
RUN dnf install -y fish distrobox nvtop intel-media-driver libva-intel-driver htop firefox
# Remove plocate to avoid updatedb going crazy with scanning the file system once a day

12
selinux/plasmalogin-selinux.te
View file

@ -1,12 +0,0 @@
module plasmalogin-selinux 1.0;
require {
type unconfined_t;
type xdm_exec_t;
class file { entrypoint execute };
}
# Allow the plasmalogin process to execute the X11 user helper binary
# which is labeled as xdm_exec_t. This is needed when the plasmalogin
# daemon is not running in the xdm_t domain on SELinux enforcing systems.
allow unconfined_t xdm_exec_t:file { entrypoint execute };