Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

/sysroot and /boot/efi have unlabeled_t selinux labels #1599

Open
dustymabe opened this issue Sep 3, 2024 · 3 comments
Open

/sysroot and /boot/efi have unlabeled_t selinux labels #1599

dustymabe opened this issue Sep 3, 2024 · 3 comments
Labels
jira lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.

Comments

@dustymabe
Copy link
Member

This is a downstream issue corresponding to:

This affects 4.16+.

[core@cosa-devsh ~]$ ls -ldZ /boot/efi /sysroot 
drwxr-xr-x. 2 root root system_u:object_r:unlabeled_t:s0 1024 May 21 21:05 /boot/efi
drwxr-xr-x. 4 root root system_u:object_r:unlabeled_t:s0   93 Aug  1  2022 /sysroot
@dustymabe dustymabe added the jira label Sep 3, 2024
@HuijingHei
Copy link
Contributor

And files & dirs under /sysroot have unlabeled_t:

[root@cosa-devsh ~]# ls -alZ /sysroot/
total 8
drwxr-xr-x.  4 root root system_u:object_r:unlabeled_t:s0   93 Aug  1  2022 .
drwxr-xr-x. 12 root root system_u:object_r:root_t:s0      4096 Jan  1  1970 ..
-rw-r--r--.  1 root root system_u:object_r:unlabeled_t:s0 1483 Aug  1  2022 .aleph-version.json
lrwxrwxrwx.  1 root root system_u:object_r:unlabeled_t:s0   19 Aug  1  2022 .coreos-aleph-version.json -> .aleph-version.json
drwxr-xr-x.  2 root root system_u:object_r:unlabeled_t:s0    6 Sep  3 23:28 boot
drwxr-xr-x.  5 root root system_u:object_r:unlabeled_t:s0   62 Sep  4 03:14 ostree

@openshift-bot
Copy link

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

@openshift-ci openshift-ci bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Dec 3, 2024
@HuijingHei
Copy link
Contributor

HuijingHei commented Dec 3, 2024

4.16 bug & 4.17 & 4.18 status are closed now, so close this as done.

Edit: I do not have the permission to close this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
jira lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.
Projects
None yet
Development

No branches or pull requests

3 participants