Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

dist git files #2359

Open
wants to merge 7 commits into
base: c10s
Choose a base branch
from
Open

dist git files #2359

wants to merge 7 commits into from

Commits on Oct 29, 2024

  1. Sync users with Fedora targeted users

    @bachradsusi
    bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    62700c1 View commit details
    Browse the repository at this point in the history

  2. Bring config files from dist-git into the source repo 

    The content of these files is more or less tied to the policy source
code. Therefore, moving these files to the source repo rather than
dist-git will make it easier to do changes that would formerly need
coordinated modification both in the sources and in dist-git (e.g.
adding or removing a module). It will also make it easier for other
distributions seeking to package a Fedora-like SELinux policy.

Those files that correspond to existing config/ files are just updated
locally to match what would be applied in dist-git; the rest is placed
into the new dist/ subdirectory. For better maintainability, files for
the different policy variants (targeted, minimum, mls) are placed into
separate subdirectories.

This will be followed up with a dist-git patch that converts it to use
the config files from sources rather than from dist-git.

Signed-off-by: Ondrej Mosnacek <[email protected]>
    @WOnder93 @bachradsusi
    WOnder93 authored and bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    97e502f View commit details
    Browse the repository at this point in the history

  3. Clean up and sync securetty_types 

    Remove types that are just aliases of user_tty_device_t and add
console_device_t also to config/appconfig-standard/securetty_types.

Also note that secureadm_tty_device_t was a misspelling of
secadm_tty_device_t - such type doesn't exist in the policy at all.

Signed-off-by: Ondrej Mosnacek <[email protected]>
    @WOnder93 @bachradsusi
    WOnder93 authored and bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    fd1ff73 View commit details
    Browse the repository at this point in the history

  4. CI: update to actions/checkout@v4 

    Fixes a deprecation warning:

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
    @XhmikosR @bachradsusi
    XhmikosR authored and bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    6ae84c8 View commit details
    Browse the repository at this point in the history

  5. Fix default and dist config files 

    - add gnome_remote_desktop to targeted modules.conf
- use symlinks to dist/targeted for default users
- drop policy/modules.conf - it's generated by `make conf`
- fix typo in users files
    @bachradsusi
    bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    a5df3cd View commit details
    Browse the repository at this point in the history

  6. Use dist/targeted/modules.conf in build workflow 

    policy/modules.conf was droped and needs to be generated
or copied from dist/ during build.
    @bachradsusi
    bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    b9f3ddc View commit details
    Browse the repository at this point in the history

  7. mls/modules.conf - fix typo

    @bachradsusi
    bachradsusi committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    96d004e View commit details
    Browse the repository at this point in the history