From: Joakim Nohlgård <joakim@nohlgard.se>
Date: Fri, 5 Apr 2024 07:07:26 +0000 (+0000)
Subject: Translate paths to SELinux policy files to /buildroot
X-Git-Tag: v23~30
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=16a44cbfcef293ace0c9cb2764ed94860f4061c7;p=thirdparty%2Fmkosi.git

Translate paths to SELinux policy files to /buildroot

The setfiles call was broken by 62cee058cb116684294831c4cab20924dde93e45
because the binary policy and file context files were still using the
host path in the run arguments.

Fixes the error `Error opening
/home/user/.cache/mkosi/mkosi-workspaceb5nodee6/root/etc/selinux/targeted/policy/policy.33:
No such file or directory`
---

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index 135f15286..fdd3b8212 100644
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -2974,6 +2974,8 @@ def run_selinux_relabel(context: Context) -> None:
         return
 
     policy, fc, binpolicy = selinux
+    fc = Path("/buildroot") / fc.relative_to(context.root)
+    binpolicy = Path("/buildroot") / binpolicy.relative_to(context.root)
 
     with complete_step(f"Relabeling files using {policy} policy"):
         run(["setfiles", "-mFr", "/buildroot", "-c", binpolicy, fc, "/buildroot"],