bootupd: Put in permissive until SELinux issues are fixed

travier · travier · commit c4e12e11a610 · 2024-10-15T13:30:13.000+02:00
See: coreos/bootupd#694 See: fedora-selinux/selinux-policy#2334 See: fedora-selinux/selinux-policy#2341 See: fedora-selinux/selinux-policy#2362
diff --git a/bootupd.yaml b/bootupd.yaml
@@ -30,3 +30,6 @@ postprocess:
     EOF
     chmod 644 /usr/lib/systemd/system/bootloader-update.service
     echo "enable bootloader-update.service" > /usr/lib/systemd/system-preset/81-atomic-desktop.preset
+
+    # Turn permissive mode on for bootupd until all SELinux issues are fixed
+    semanage permissive --noreload --add bootupd_t
