Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
It stopped too early, exposing a bug in sudo selinux_restore_tty(): SELINUX_ERR op=setxattr invalid_context="wheel.id:wheel.role:users.terminals.pty.pty_file:SystemLow" avc: denied { mac_admin } for pid=859 comm="sudo" capability=33 scontext=wheel.id:wheel.role:sudo.wheel.subj:s0 tcontext=wheel.id:wheel.role:sudo.wheel.subj:s0 tclass=capability2 permissive=0 If we want to be able to reference human readable contexts in SELinuxContext= and nspawn -Z and -L then we need mcstrans ASAP v2: stop late, but do stop Signed-off-by: Dominick Grift <dac.override@gmail.com> Acked-by: Petr Lautrbach <plautrba@redhat.com>
- Loading branch information