mount: don't label VFAT filesystems to avoid operation not supported …

…in imager Signed-off-by: Dmitry Sharshakov <[email protected]>
siderolabs · Aug 8, 2024 · 80fbde2 · 80fbde2
1 parent 9076d9c
commit 80fbde2
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 6 deletions.
diff --git a/internal/pkg/mount/system.go b/internal/pkg/mount/system.go
@@ -74,10 +74,8 @@ func SystemMountPointForLabel(ctx context.Context, device *blockdevice.BlockDevi
 		context = "system_u:object_r:ephemeral_t:s0"
 	case constants.BootPartitionLabel:
 		target = constants.BootMountPoint
-		context = "system_u:object_r:boot_t:s0"
 	case constants.EFIPartitionLabel:
 		target = constants.EFIMountPoint
-		context = "system_u:object_r:boot_efi_t:s0"
 	case constants.StatePartitionLabel:
 		target = constants.StateMountPoint
 		context = "system_u:object_r:system_state_t:s0"

diff --git a/selinux/common/files.cil b/selinux/common/files.cil
@@ -78,10 +78,6 @@
 
 (type ephemeral_t)
 (call filesystem (ephemeral_t))
-(type boot_t)
-(call filesystem (boot_t))
-(type boot_efi_t)
-(call filesystem (boot_efi_t))
 (type system_state_t)
 (call filesystem (system_state_t))