Skip to content

Conversation

@craigcomstock
Copy link
Contributor

@craigcomstock craigcomstock commented Nov 14, 2025

As a workaround, if the cfengine-enterprise selinux module fails to install we set binaries to unconfined domain with bin_t type.

Ticket: ENT-12980
Changelog: title
(cherry picked from commit 190c974)

together
#2037

cfengine/core#5945

@craigcomstock craigcomstock changed the title Adjusted RPM packaging to be avoid failed installs when selinux-policy version is not sufficient Adjusted RPM packaging to be avoid failed installs when selinux-policy version is not sufficient (3.24) Nov 14, 2025
@craigcomstock
Copy link
Contributor Author

@cf-bottom jenkins with exotics please

@cf-bottom
Copy link

Copy link
Contributor

@vpodzime vpodzime left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like we need a different approach. :-/

@craigcomstock craigcomstock force-pushed the ent-12980/3.24 branch 3 times, most recently from 0a46cb1 to 5f1d431 Compare November 14, 2025 20:53
…y version is not sufficient

We have two fallback strategies:
1) try to install a cfengine-enterprise-unconfined selinux module
2) instruct user to install semanage and run label-binaries-unconfined.sh script

Ticket: ENT-12980
Changelog: title
(cherry picked from commit 190c974)
@craigcomstock
Copy link
Contributor Author

Build Status

@craigcomstock
Copy link
Contributor Author

Build Status

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants