2 Commits

Author	SHA1	Message	Date
Colin Walters	7c99809a71	core: Change relabeling to use libostree's SELinux support ... This function is now basically reimplementing all of the intelligence we have in libostree today. It wouldn't have worked before we fixed https://github.com/ostreedev/ostree/issues/1165 but now that's done, conceptually we just need to call `ostree_repo_commit_modifier_set_sepolicy()`. However, I had to drop the "number of files changed" since currently the libostree API doesn't support that. Also, in order to detect the case that content changes at all (so we still have some useful information in the journal), implement a "content hash" check. See also https://github.com/projectatomic/rpm-ostree/pull/1123 (And note we *don't* use `DEVINO_CANONICAL` here) Closes: #1138 Approved by: jlebon	2017-12-08 15:01:32 +00:00
Jonathan Lebon	a9c38d33b8	vmcheck: add SELinux labeling tests ... There's a lot of paths in the core related to SELinux policy changes and relabeling packages. We currently have no test coverage for them. We add support in the test libraries here to build such packages. We also add a test that checks both that we correctly relabel RPMs when the policy changes and that we handle layered packages that install SELinux packages properly. Closes: #999 Approved by: cgwalters	2017-10-03 01:01:14 +00:00