Re: [PATCH] Add SELinux policy for guix-daemon.

[Ricardo Wurmus]

Catonano <address@hidden> writes:

>> If you want to test this on Fedora, set SELinux to permissive, and make
>> sure to configure Guix properly (i.e. set localstatedir, prefix, and
>> sysconfdir).  Then install the policy with “sudo semodule -i
>> etc/guix-daemon.cil”.  Then relabel the filesystem (at least /gnu,
>> $localstatedir, $sysconfdir, and $prefix) with something like this:
>>
>>     sudo restorecon -R /gnu $localstatedir $sysconfdir $prefix
>>
>
> can I do this with the binary installation made with Sharlatan's script ?

No, the script won’t install the SELinux policy.  It wouldn’t work on
all systems, only on those where a suitable SELinux base policy is
available.

> $localstatedir is /var, I suppose
>
> But I don' t know about $sysconfdir and $prefix

/etc and /.  But you’d be better off just relabeling everything.  On
Fedora you can touch a certain file and have everything relabeled on
reboot.  Takes a long time, though.

--
Ricardo