From ee061603515b911c06297470f6daefce4dff8a64 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Wed, 19 Aug 2026 20:48:00 +0200 Subject: [PATCH] docker-engine/rpm: Package all SELinux policies MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In case there are more SELinux policies in future versions, copy them all. Signed-off-by: Paweł Gronowski --- pkg/docker-engine/rpm/docker-ce.spec | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pkg/docker-engine/rpm/docker-ce.spec b/pkg/docker-engine/rpm/docker-ce.spec index 3d2d9102..48045956 100644 --- a/pkg/docker-engine/rpm/docker-ce.spec +++ b/pkg/docker-engine/rpm/docker-ce.spec @@ -91,8 +91,9 @@ install -D -p -m 0644 engine/contrib/init/systemd/docker.socket ${RPM_BUILD_ROOT # install manpages make -C ${RPM_BUILD_DIR}/src/engine/man DESTDIR=${RPM_BUILD_ROOT} mandir=%{_mandir} install -# install SELinux policy to deny AF_ALG sockets in container domains -install -D -m 644 engine/contrib/selinux/docker-af-alg-deny.cil %{buildroot}%{_datadir}/docker-ce/selinux/docker-af-alg-deny.cil +# install SELinux policies +install -d -m 755 %{buildroot}%{_datadir}/docker-ce/selinux +install -m 644 engine/contrib/selinux/*.cil %{buildroot}%{_datadir}/docker-ce/selinux/ # create the config directory mkdir -p ${RPM_BUILD_ROOT}/etc/docker @@ -104,7 +105,7 @@ mkdir -p ${RPM_BUILD_ROOT}/etc/docker %{_unitdir}/docker.service %{_unitdir}/docker.socket %{_mandir}/man*/* -%{_datadir}/docker-ce/selinux/docker-af-alg-deny.cil +%{_datadir}/docker-ce/selinux/*.cil %dir /etc/docker %post