Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

readlinkfs: ignore security.selinux xattrs #790

Merged

Conversation

joemiller
Copy link
Contributor

Packages built on a host with selinux enabled will inherit filesytem xattr labels from the host and result in 'operation not permitted' errors when installed in an unpriv'd docker container.

fixes #787

Melange Pull Request Template

Functional Changes

  • This change can build all of Wolfi without errors (describe results in notes)

Notes:

SCA Changes

  • Examining several representative APKs show no regression / the desired effect (details in notes)

Notes:

Linter

  • The new check is clean across Wolfi
  • The new check is opt-in or a warning

Notes:

@joemiller joemiller force-pushed the ignore-selinux-xattr-labels branch from bc5a41d to d0cb260 Compare October 25, 2023 20:19
Packages built on a host with selinux enabled will inherit filesytem
xattr labels from the host and result in 'operation not permitted'
errors when installed in an unpriv'd docker container.

fixes chainguard-dev#787

Signed-off-by: joe miller <[email protected]>
@joemiller joemiller force-pushed the ignore-selinux-xattr-labels branch from d0cb260 to ea94e55 Compare October 25, 2023 20:19
@kaniini kaniini enabled auto-merge October 25, 2023 21:00
@kaniini kaniini merged commit d727f52 into chainguard-dev:main Oct 25, 2023
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

failed to set xattrs when installing melange-built packages
2 participants