Skip to content

Commit

Permalink
Merge pull request #1145 from cgwalters/filesystem-tweaks
Browse files Browse the repository at this point in the history
storage: Drop duplicate SELinux section
  • Loading branch information
cgwalters authored Feb 26, 2025
2 parents 22c743f + 8f60e20 commit ffaf108
Showing 1 changed file with 1 addition and 10 deletions.
11 changes: 1 addition & 10 deletions docs/src/filesystem-storage.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,16 +62,7 @@ This is implemented in the [ostree-rs-ext/container module](https://docs.rs/ostr

### SELinux labeling

A major wrinkle is supporting SELinux labeling. The labeling configuration
is defined as regular expressions included in `/etc/selinux/$policy/contexts/`.

The current implementation relies on the fact that SELinux labels for
base images were pre-computed. The first step is to check out the "ostree base"
layers for the base image.

All derived layers have labels computed from the base image policy. This
causes a known bug where derived layers can't include custom policy:
<https://github.com/ostreedev/ostree-rs-ext/issues/510>
See the SELinux section of [Image layout](bootc-images.md).

### Origin files

Expand Down

0 comments on commit ffaf108

Please sign in to comment.