From mboxrd@z Thu Jan  1 00:00:00 1970
Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=maxchernoff.ca
Authentication-Results: passt.top;
	dkim=pass (2048-bit key; secure) header.d=maxchernoff.ca header.i=@maxchernoff.ca header.a=rsa-sha256 header.s=key1 header.b=01uIay6N;
	dkim-atps=neutral
Received: from out-186.mta0.migadu.com (out-186.mta0.migadu.com [91.218.175.186])
	by passt.top (Postfix) with ESMTPS id 586685A0287
	for <passt-dev@passt.top>; Wed, 11 Jun 2025 11:31:10 +0200 (CEST)
Message-ID: <0301e5b0dca6d2faa6d4ed591af9745b85237051.camel@maxchernoff.ca>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=maxchernoff.ca;
	s=key1; t=1749634269;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=22QNGXCNXDY0d6WQR+ExuQ/j0aoVcpQLebZJSX1K9Ko=;
	b=01uIay6NsvkLkshzqhF6ThAIf0QUenvg1iUFlnQ61THtbD2X5I0ttETI9gKDzD7ygTeERA
	7cBm/q5Q8iq1yHP3sVzarul1MNtGAbsnaQMVfWgMli2sxdeNvMg7oWk+JDSZhXonA9V0Ow
	epYVuJv7NFtpG01NooWBdLbU1ORIuOYwDPgjga53lyc/ZfUUo57AExnLhmBGJzAUkZrFlk
	3+Cm8Pv2NfPijKVr8ouK0xCbTeGoPMPUMRXznWRc7TGXnPhB2W8ttXbn6tISTV1x4huNwr
	tas4ETQPl3SZwPjUlEn0NCI1oSYXQzdi1R4qFAGCWkci+dISgpkvbNp4hCs73Q==
Subject: Re: [PATCH] fedora: Hide restorecon(8) errors in post-transaction
 scriptlet
X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers.
From: Max Chernoff <git@maxchernoff.ca>
To: Stefano Brivio <sbrivio@redhat.com>, passt-dev@passt.top
Date: Wed, 11 Jun 2025 03:31:04 -0600
In-Reply-To: <20250610151135.3425210-1-sbrivio@redhat.com>
References: <20250610151135.3425210-1-sbrivio@redhat.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Migadu-Flow: FLOW_OUT
X-MailFrom: git@maxchernoff.ca
X-Mailman-Rule-Hits: nonmember-moderation
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation
Message-ID-Hash: SUJS3ZAVKI4Q6ZGRYHTESG7CRJ3P5K7K
X-Message-ID-Hash: SUJS3ZAVKI4Q6ZGRYHTESG7CRJ3P5K7K
X-Mailman-Approved-At: Wed, 11 Jun 2025 12:13:33 +0200
CC: Max Chernoff <git@maxchernoff.ca>
X-Mailman-Version: 3.3.8
Precedence: list
List-Id: Development discussion and patches for passt <passt-dev.passt.top>
Archived-At: <https://archives.passt.top/passt-dev/0301e5b0dca6d2faa6d4ed591af9745b85237051.camel@maxchernoff.ca/>
Archived-At: <https://passt.top/hyperkitty/list/passt-dev@passt.top/message/SUJS3ZAVKI4Q6ZGRYHTESG7CRJ3P5K7K/>
List-Archive: <https://archives.passt.top/passt-dev/>
List-Archive: <https://passt.top/hyperkitty/list/passt-dev@passt.top/>
List-Help: <mailto:passt-dev-request@passt.top?subject=help>
List-Owner: <mailto:passt-dev-owner@passt.top>
List-Post: <mailto:passt-dev@passt.top>
List-Subscribe: <mailto:passt-dev-join@passt.top>
List-Unsubscribe: <mailto:passt-dev-leave@passt.top>

Hi Stefano,

On Tue, 2025-06-10 at 17:11 +0200, Stefano Brivio wrote:
> Commit e01932353869 ("fedora: Separately restore context for /run/user
> in %posttrans selinux") added a call to restorecon for /run/user in
> the passt-selinux post-transaction scriptlet, and we can't give a path
> that's more specific than that, but it often contains FUSE mountpoints
> that are not accessible as root, resulting in warnings as the package
> is installed.
>
> Hide the errors, a failure in relabeling wouldn't be really
> problematic in any case.

I've tested installing an RPM built with both "fedora: Hide restorecon"
and "fedora: Add container-selinux" applied, and can confirm that both
are working as expected.

Thanks,
-- Max