Skip to content

Commit af3dae9

Browse files
committed
overlay profiles: Clean up selinux enabling
Not needed given that we have switched to selinux profile, which enables selinux USE.
1 parent 5ead649 commit af3dae9

File tree

2 files changed

+4
-23
lines changed

2 files changed

+4
-23
lines changed

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use

Lines changed: 4 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,8 @@ dev-vcs/git -perl -iconv
2929
app-admin/sudo -sendmail
3030

3131
# disable hybrid cgroup as we use the unified mode now
32-
# use lzma which is the default on non-gentoo systems, enable selinux,
33-
sys-apps/systemd -cgroup-hybrid curl idn lzma selinux tpm
32+
# use lzma which is the default on non-gentoo systems,
33+
sys-apps/systemd -cgroup-hybrid curl idn lzma tpm
3434
net-libs/libmicrohttpd -ssl
3535

3636
# disable kernel config detection and module building
@@ -59,7 +59,7 @@ sys-libs/glibc nscd
5959
dev-libs/cyrus-sasl kerberos -gdbm
6060

6161
# don't build manpages for sssd
62-
sys-auth/sssd -python samba kerberos gssapi ssh selinux
62+
sys-auth/sssd -python samba kerberos gssapi ssh
6363

6464
# enable logging command-line options in update_engine
6565
dev-cpp/glog gflags
@@ -72,20 +72,7 @@ sys-fs/quota rpc
7272
sys-apps/portage -xattr -rsync-verify
7373

7474
# Enable -M and -Z flags; -M is used by mayday
75-
sys-process/lsof rpc selinux
76-
77-
# Enable SELinux for all targets
78-
coreos-base/coreos selinux
79-
sys-apps/dbus selinux
80-
81-
# Enable SELinux for coreutils
82-
sys-apps/coreutils selinux
83-
84-
# Enable SELinux for tar
85-
app-arch/tar selinux
86-
87-
# Enable SELinux for runc
88-
app-containers/runc selinux
75+
sys-process/lsof rpc
8976

9077
# enable regular expression processing in jq
9178
app-misc/jq oniguruma
@@ -139,9 +126,6 @@ dev-libs/libpcre2 -pcre16 -pcre32 unicode
139126
# smi and ssl, no clue.
140127
net-analyzer/tcpdump -ssl -smi -samba
141128

142-
# selinux: to find files with a particular SElinux label
143-
sys-apps/findutils selinux
144-
145129
# Flatcar defaults formerly defined in coreos-overlay ebuilds
146130
app-containers/containerd btrfs device-mapper
147131
app-containers/docker btrfs overlay seccomp

sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/use.mask

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,6 @@ python_single_target_python3_12
1515
python_targets_python3_13
1616
python_single_target_python3_13
1717

18-
# Unmask selinux so it can be enabled selectively in package.use
19-
-selinux
20-
2118
# We don't care about i10n, takes too much space, pulls in too many
2219
# extra dependencies.
2320
nls

0 commit comments

Comments
 (0)