From 8f60e20195af639b04a86106c0f499503cfc83be Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Wed, 26 Feb 2025 08:44:57 -0500 Subject: [PATCH] storage: Drop duplicate SELinux section The info in this one was outdated and wrong (we now support labeling dynamically). Signed-off-by: Colin Walters --- docs/src/filesystem-storage.md | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) diff --git a/docs/src/filesystem-storage.md b/docs/src/filesystem-storage.md index 3b7ee24d7..316cc293e 100644 --- a/docs/src/filesystem-storage.md +++ b/docs/src/filesystem-storage.md @@ -62,16 +62,7 @@ This is implemented in the [ostree-rs-ext/container module](https://docs.rs/ostr ### SELinux labeling -A major wrinkle is supporting SELinux labeling. The labeling configuration -is defined as regular expressions included in `/etc/selinux/$policy/contexts/`. - -The current implementation relies on the fact that SELinux labels for -base images were pre-computed. The first step is to check out the "ostree base" -layers for the base image. - -All derived layers have labels computed from the base image policy. This -causes a known bug where derived layers can't include custom policy: - +See the SELinux section of [Image layout](bootc-images.md). ### Origin files