openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update ansible-role-tripleo-modify-image from branch 'master'
  to b6eedb6fb194ec32b92866257131714e02bae741
  - Ensure update_yum.sh has correct SELinux labels
    
    On recent, enforcing systems, the update_yum.sh can't be executed,
    because SELinux prevents container_t to open user_tmp_t:
    
    type=AVC msg=audit(1674049913.380:22858): avc:  denied  { open } for
        pid=70472 comm="bash" path="/tmp/yum_update.sh" dev="vda4" ino=218200014
        scontext=system_u:system_r:container_t:s0:c65,c705
        tcontext=unconfined_u:object_r:user_tmp_t:s0
        tclass=file permissive=0
    
    This patch ensures it gets properly relabelled when bind-mounted during
    the image build. Using the "z" will also ensure it's still usable even
    when running multiple builds at the same time.
    
    Change-Id: I4085865965f48c9fa6a88cde7010a51cd8c653d8
This commit is contained in:
Cédric Jeanneret 2023-02-10 03:15:36 +01:00 committed by Gerrit Code Review
parent 647d33a704
commit 25d9a071ad
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible-role-tripleo-modify-image

@ -1 +1 @@
Subproject commit d023d54eb6d8381c842c6912241a35a4a865d302
Subproject commit b6eedb6fb194ec32b92866257131714e02bae741