[meta-selinux] packagegroup-selinux-minimal: add selinux-init

Submitted by Luca Boccassi on Feb. 19, 2019, 11:57 a.m. | Patch ID: 158839

Details

Message ID 20190219115743.17336-1-bluca@debian.org
State New
Headers show

Commit Message

Luca Boccassi Feb. 19, 2019, 11:57 a.m.
When trying to build a minimal image (eg: without python), the default
user on autologin is not mapped to the intended user/role/domain:

  # id -Z
  system_u:system_r:kernel_t:s0

And the following error is displayed on autologin:

  Unable to get valid context for <user>

While on an image built with the core-selinux packagegroup:

  # id -Z
  unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

Adding selinux-init to the minimal package list fixes the issue.
This package does not seem to bring along additional dependencies.

Signed-off-by: Luca Boccassi <bluca@debian.org>
---
 recipes-security/packagegroups/packagegroup-selinux-minimal.bb | 1 +
 1 file changed, 1 insertion(+)

Patch hide | download patch | download mbox

diff --git a/recipes-security/packagegroups/packagegroup-selinux-minimal.bb b/recipes-security/packagegroups/packagegroup-selinux-minimal.bb
index 5c2eabd..e198e84 100644
--- a/recipes-security/packagegroups/packagegroup-selinux-minimal.bb
+++ b/recipes-security/packagegroups/packagegroup-selinux-minimal.bb
@@ -19,6 +19,7 @@  RDEPENDS_${PN} = "\
 	policycoreutils-semodule \
 	policycoreutils-sestatus \
 	policycoreutils-setfiles \
+	selinux-init \
 	selinux-labeldev \
 	refpolicy \
 "