Bug 1200079 - docker.pp policy module for docker should be a part of docker package
Summary: docker.pp policy module for docker should be a part of docker package
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: docker
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lokesh Mandvekar
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1200080
TreeView+ depends on / blocked
 
Reported: 2015-03-09 16:19 UTC by Lukas Vrabec
Modified: 2015-03-22 08:41 UTC (History)
14 users (show)

Fixed In Version:
Clone Of:
: 1200080 (view as bug list)
Environment:
Last Closed: 2015-03-22 08:41:05 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Lukas Vrabec 2015-03-09 16:19:31 UTC
Description of problem:

Currently, we ship docker.pp policy module with SELinux policy for docker. We would like to move this policy out of the base policy and docker.pp would be shipped by docker-selinux.rpm.

How to do it:

1. We need to ship a new version of selinux-policy pgks without shipping of docker.pp and docker policy files. The docker.pp module will stay in memory but this is not any issue.

2. docker-selinux needs to package source files from:
https://github.com/fedora-selinux/selinux-policy/blob/rawhide-contrib/docker.fc
https://github.com/fedora-selinux/selinux-policy/blob/rawhide-contrib/docker.if
https://github.com/fedora-selinux/selinux-policy/blob/rawhide-contrib/docker.te

and docker.pp.

We won't ship these source policy files for docker.pp

3. docker-selinux needs to have a conflict with the policy without docker.pp.

Comment 1 Fedora Admin XMLRPC Client 2015-03-22 06:11:32 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 2 Lokesh Mandvekar 2015-03-22 08:41:05 UTC
Release 21 takes care of this.


Note You need to log in before you can comment on or make changes to this bug.