SELinux policy core utilities
9616c6c3d6
selinux-autorelabel service can be configured to drop to a shell to allow administrator to manually relabel a filesystem, see selinux_config(5). In this case, the service needs to have a tty attached to stdin. Given that tty should not be attached to the service by default, see https://bugzilla.redhat.com/show_bug.cgi?id=1634661 , the selinux-autorelabel-generator.sh will configure the service to attach tty only if AUTORELABEL=0 Resolves: rhbz#2165508 |
||
|---|---|---|
| .fmf | ||
| plans | ||
| .gitignore | ||
| 0001-sandbox-add-reset-to-Xephyr-as-it-works-better-with-.patch | ||
| 0002-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages.patch | ||
| 0003-If-there-is-no-executable-we-don-t-want-to-print-a-p.patch | ||
| 0004-Don-t-be-verbose-if-you-are-not-on-a-tty.patch | ||
| 0005-sepolicy-generate-Handle-more-reserved-port-types.patch | ||
| 0006-sandbox-Use-matchbox-window-manager-instead-of-openb.patch | ||
| 0007-Use-SHA-2-instead-of-SHA-1.patch | ||
| 0008-sepolicy-Drop-old-interface-file_type_is_executable-.patch | ||
| 0009-python-sepolicy-Cache-conditional-rule-queries.patch | ||
| gating.yaml | ||
| policycoreutils.spec | ||
| README.translations | ||
| rpminspect.yaml | ||
| selinux-autorelabel | ||
| selinux-autorelabel-generator.sh | ||
| selinux-autorelabel-mark.service | ||
| selinux-autorelabel.service | ||
| selinux-autorelabel.target | ||
| sepolicy-help.tgz | ||
| sepolicy-icons.tgz | ||
| sources | ||
| system-config-selinux.png | ||
SELinux translations currently live in the following locations:
- https://translate.fedoraproject.org/projects/selinux/
- contains 2 versions of translatable strings rhel8 (latest RHEL 8 release) and main (Fedora and RHEL 9)
- maintains large number of languages (several of which do not actually contain any translated strings)
- updated by community and partially by RH localization effort
- SELinux source repositories (periodicaly updated from weblate)
- https://github.com/fedora-selinux/selinux
- used for Fedora, latest CentOS and RHEL 9
- https://gitlab.cee.redhat.com/SELinux/selinux
- used for RHEL 8 and older
How to update source files on weblate:
$ git clone git@github.com:fedora-selinux/selinux.git
$ cd selinux
$ git checkout c9s
# generate new potfiles
$ for p in policycoreutils python gui sandbox; do
cd $p/po
rm $p.pot
make $p.pot
sed -i 's/charset=CHARSET/charset=UTF-8/g' $p.pot
cd -
done
# https://translate.fedoraproject.org/projects/selinux/policycoreutils/en/
# Files -> Upload translations
# Repeat the process for python, gui and sandbox
# or use weblate command line tool (get your API key at https://translate.fedoraproject.org/accounts/profile/#api):
$ for p in policycoreutils python gui sandbox; do
wlc --key <API key> --url https://translate.fedoraproject.org/api/ upload --input $p/po/$p.pot selinux/$p/en --method=source
done
How to pull new translations from weblate
$ git clone git@github.com:fedora-selinux/selinux.git
# https://translate.fedoraproject.org/projects/selinux/policycoreutils
# Files -> Download translation files as ZIP file (save in selinux source directory)
# Repeat the process for python, gui and sandbox
# or use weblate command line tool
$ for p in policycoreutils python gui sandbox; do
wlc --key <API key> --url https://translate.fedoraproject.org/api/ download selinux/$p --output selinux
done
# unzip archives
$ cd selinux
$ for p in policycoreutils python gui sandbox; do
unzip -o selinux-$p.zip -d ..
rm selinux-$p.zip
done
$ git add .
$ git commit