diff mbox series

[meta-selinux,2/3] selinux-autorelabel: do not carry /.autorelabel

Message ID 20260910023825.1829224-2-chenqi_hycx@cetc.com.cn
State New
Headers show
Series [meta-selinux,1/3] selinux-image.bbclass: fix selinux_set_labels | expand

Commit Message

Chen Qi Sept. 10, 2026, 2:38 a.m. UTC 
From: Chen Qi <chenqi_hycx@cetc.com.cn>

It's just logically wrong that a package carries /.autorelabel file.
This is because installing this package causes the whole system to
autorelabel. Besides, this /.autorelabel file is really an admin file
that should be managed at rootfs or target runtime.

We should let selinux-image.bbclass to handle this file.

Signed-off-by: Chen Qi <chenqi_hycx@cetc.com.cn>
---
 recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb | 6 ------
 recipes-security/selinux-scripts/selinux-initsh.inc         | 2 --
 2 files changed, 8 deletions(-)
diff mbox series

Patch

diff --git a/recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb b/recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb
index 9fd066c..c6eefbe 100644
--- a/recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb
+++ b/recipes-security/selinux-scripts/selinux-autorelabel_0.1.bb
@@ -18,9 +18,3 @@  SRC_URI = "file://${BPN}.sh \
 INITSCRIPT_PARAMS = "start 01 S ."
 
 require selinux-initsh.inc
-
-do_install:append() {
-    if ${@bb.utils.contains('FIRST_BOOT_RELABEL', '1', 'true', 'false', d)}; then
-        echo "# first boot relabelling" > ${D}/.autorelabel
-    fi
-}
diff --git a/recipes-security/selinux-scripts/selinux-initsh.inc b/recipes-security/selinux-scripts/selinux-initsh.inc
index 1fc1ec1..7fbb650 100644
--- a/recipes-security/selinux-scripts/selinux-initsh.inc
+++ b/recipes-security/selinux-scripts/selinux-initsh.inc
@@ -18,8 +18,6 @@  inherit update-rc.d systemd
 
 SYSTEMD_SERVICE:${PN} = "${SELINUX_SCRIPT_SRC}.service"
 
-FILES:${PN} += "/.autorelabel"
-
 do_install () {
 	install -d ${D}${sysconfdir}/init.d/
 	install -m 0755 ${S}/${SELINUX_SCRIPT_SRC}.sh ${D}${sysconfdir}/init.d/${SELINUX_SCRIPT_DST}