)]}'
{"diskimage_builder/elements/rpm-distro/cleanup.d/99-selinux-fixfiles-restore":[{"author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"change_message_id":"b9003c2cac7e35b9d8c5d41183127c2da3cb7ed3","unresolved":false,"context_lines":[{"line_number":45,"context_line":"# for whatever policy is in the host kernel.  We will run under"},{"line_number":46,"context_line":"# \"runcon\" to specifically allow this"},{"line_number":47,"context_line":"_runcon\u003d\"\""},{"line_number":48,"context_line":"if [[ -d /sys/fs/selinux \u0026\u0026 -n $(selinuxenabled) ]]; then"},{"line_number":49,"context_line":"    sudo semanage permissive -a setfiles_mac_t"},{"line_number":50,"context_line":"    _runcon\u003d\"runcon -t setfiles_mac_t -- \""},{"line_number":51,"context_line":"fi"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"5fc1f717_59009f34","line":48,"updated":"2019-03-28 03:49:23.000000000","message":"I guess selinux can not be enabled without /sys/fs/selinux being there, but as you note the inverse (directory can be there in kernel but not enabled in container) can be true.\n\nHowever this doesn\u0027t look like the right way to check it to me; this exits with 0 or 1 so this should look something like\n\n if [[ -d /sys/fs/selinux ]] \u0026\u0026 selinuxenabled; then\n  ...","commit_id":"fd8df4a2581ea968fe9bb6b32636bba7c2d62d69"},{"author":{"_account_id":30107,"name":"Serena Ziviani","email":"serena.ziviani@cern.ch","username":"sziviani"},"change_message_id":"c82e3c3db810a300308e79b6a176ff1559ec69ca","unresolved":false,"context_lines":[{"line_number":45,"context_line":"# for whatever policy is in the host kernel.  We will run under"},{"line_number":46,"context_line":"# \"runcon\" to specifically allow this"},{"line_number":47,"context_line":"_runcon\u003d\"\""},{"line_number":48,"context_line":"if [[ -d /sys/fs/selinux \u0026\u0026 -n $(selinuxenabled) ]]; then"},{"line_number":49,"context_line":"    sudo semanage permissive -a setfiles_mac_t"},{"line_number":50,"context_line":"    _runcon\u003d\"runcon -t setfiles_mac_t -- \""},{"line_number":51,"context_line":"fi"}],"source_content_type":"application/x-shellscript","patch_set":1,"id":"5fc1f717_e2042b1a","line":48,"in_reply_to":"5fc1f717_59009f34","updated":"2019-03-28 13:34:40.000000000","message":"Thanks Ian for the correction, I don\u0027t know how I missed this.","commit_id":"fd8df4a2581ea968fe9bb6b32636bba7c2d62d69"}]}