Fixed selinux creation #15077
Fixed selinux creation #15077
Conversation
|
Hey! TDD788 has not signed the Canonical CLA which is required to get this contribution merged on this project.
Please head over to https://ubuntu.com/legal/contributors to read more about it. |
| allow init_t snappy_snap_t:filesystem remount; | ||
|
|
||
| # Definir los tipos si no están definidos | ||
| type unconfined_exec_t; |
There was a problem hiding this comment.
these types are already defined in the reference policy see https://github.com/SELinuxProject/refpolicy/blob/acbe8e62cb712403e238d692e11f983c438e52ce/config/appconfig-standard/default_type, and then supporting types are part of the unconfined module: https://github.com/SELinuxProject/refpolicy/blob/acbe8e62cb712403e238d692e11f983c438e52ce/policy/modules/system/unconfined.te
then surprisingly the upstream reference policy does not have unconfined_service_t, but Fedora's reference policy does:
https://github.com/fedora-selinux/selinux-policy/blob/1e6221cdad83095faff06774c600a308544d64b8/policy/modules/system/unconfined.te
I guess depending where you get your policy from you end up with different outcomes. In any case, our goal is not to deal with where downstream distributions get their policies from.
Thanks for helping us make a better snapd!
Have you signed the license agreement and read the contribution guide?