Re: Stuck installing guix package manager on Fedora with selinux

[Alexis Simon <alexis.simon@runbox.com>]

Hi,

So trying to prepare a patch, I realized those changes are already in 
master. So that's the reason I didn't get them in the normal stable 
release install.

Alexis

On 18/10/2023 19:02, Maxim Cournoyer wrote:
> Hello,
> 
> Alexis Simon <alexis.simon@runbox.com> writes:
> 
>> Ok I think I'm starting to get somewhere
>>
>> those are the changes that were needed in the selinux policy to be
>> able to start installing a package
>>
>> ==============================================
>> diff --git a/guix-daemon.cil b/guix-daemon.cil
>> index 3994e62..c26ed1a 100644
>> --- a/guix-daemon.cil
>> +++ b/guix-daemon.cil
>> @@ -202,7 +202,7 @@
>>                         sys_admin)))
>>     (allow guix_daemon_t
>>            fs_t
>> -         (filesystem (unmount)))
>> +         (filesystem (unmount remount)))
>>     (allow guix_daemon_t
>>            devpts_t
>>            (dir (search)))
>> @@ -308,6 +308,8 @@
>>            (lnk_file (read)))
>>     (allow guix_daemon_t NetworkManager_var_run_t
>>            (dir (search)))
>> +  (allow guix_daemon_t init_var_run_t
>> +         (dir (search)))
>>
>>     ;; Access to profiles
>>     (allow guix_daemon_t
>> =============================================
>>
>> I'll try it out more and update as I go along.
> 
> Sounds good, keep us posted!  When you have reached a point you are
> satisfied with, please email your patch to guix-patches@gnu.org.
>