From 80fbde2c3bb7cbebcaff34255e4c90f9aa4b21e1 Mon Sep 17 00:00:00 2001 From: Dmitry Sharshakov Date: Thu, 8 Aug 2024 12:11:59 +0300 Subject: [PATCH] mount: don't label VFAT filesystems to avoid operation not supported in imager Signed-off-by: Dmitry Sharshakov --- internal/pkg/mount/system.go | 2 -- selinux/common/files.cil | 4 ---- 2 files changed, 6 deletions(-) diff --git a/internal/pkg/mount/system.go b/internal/pkg/mount/system.go index 6fe86096c40..42629aa32c7 100644 --- a/internal/pkg/mount/system.go +++ b/internal/pkg/mount/system.go @@ -74,10 +74,8 @@ func SystemMountPointForLabel(ctx context.Context, device *blockdevice.BlockDevi context = "system_u:object_r:ephemeral_t:s0" case constants.BootPartitionLabel: target = constants.BootMountPoint - context = "system_u:object_r:boot_t:s0" case constants.EFIPartitionLabel: target = constants.EFIMountPoint - context = "system_u:object_r:boot_efi_t:s0" case constants.StatePartitionLabel: target = constants.StateMountPoint context = "system_u:object_r:system_state_t:s0" diff --git a/selinux/common/files.cil b/selinux/common/files.cil index fddf0297ddc..aeebbeae4cd 100644 --- a/selinux/common/files.cil +++ b/selinux/common/files.cil @@ -78,10 +78,6 @@ (type ephemeral_t) (call filesystem (ephemeral_t)) -(type boot_t) -(call filesystem (boot_t)) -(type boot_efi_t) -(call filesystem (boot_efi_t)) (type system_state_t) (call filesystem (system_state_t))