containers/bootc
1
0
Fork 0
mirror of https://github.com/containers/bootc.git synced 2026-02-05 15:45:53 +01:00
Code Issues Activity

storage: Drop duplicate SELinux section

Browse Source 
The info in this one was outdated and wrong (we now support labeling
dynamically).

Signed-off-by: Colin Walters <walters@verbum.org>
This commit is contained in:
Colin Walters
2025-02-26 08:44:57 -05:00
parent d1893c9833
commit 8f60e20195
1 changed files with 1 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
docs/src/filesystem-storage.md
View File

@@ -62,16 +62,7 @@ This is implemented in the [ostree-rs-ext/container module](https://docs.rs/ostr
### SELinux labeling
A major wrinkle is supporting SELinux labeling. The labeling configuration
is defined as regular expressions included in `/etc/selinux/$policy/contexts/`.
The current implementation relies on the fact that SELinux labels for
base images were pre-computed. The first step is to check out the "ostree base"
layers for the base image.
All derived layers have labels computed from the base image policy. This
causes a known bug where derived layers can't include custom policy:
<https://github.com/ostreedev/ostree-rs-ext/issues/510>
See the SELinux section of [Image layout](bootc-images.md).
### Origin files