Skip to content

Commit 7cf6346

Browse files
committed
overlay profiles: Build only the mcs SELinux policy
Building multiple policies is pointless - changing the policy at runtime would require relabeling the filesystem, which will not work, because /usr is read-only.
1 parent eeb01ce commit 7cf6346

File tree

1 file changed

+1
-1
lines changed
  • sdk_container/src/third_party/coreos-overlay/profiles/coreos/base

1 file changed

+1
-1
lines changed

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/make.defaults

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ BOOTSTRAP_USE="${BOOTSTRAP_USE} curl_ssl_openssl ssl"
4545
BOOTSTRAP_USE="${BOOTSTRAP_USE} xml"
4646

4747
# Set SELinux policy
48-
POLICY_TYPES="targeted mcs mls"
48+
POLICY_TYPES="mcs"
4949

5050
# Disable packages or optional features with distribution issues.
5151
ACCEPT_RESTRICT="* -bindist"

0 commit comments

Comments
 (0)