From 8d90cc08f1bedc343ac7eeee6688428515a17829 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timoth=C3=A9e=20Ravier?= <tim@siosm.fr>
Date: Wed, 4 Sep 2024 15:57:16 +0200
Subject: [PATCH] bootupd: Put in permissive until SELinux issues are fixed

See: https://github.com/coreos/bootupd/issues/694
See: https://github.com/fedora-selinux/selinux-policy/issues/2334
See: https://github.com/fedora-selinux/selinux-policy/issues/2341
See: https://github.com/fedora-selinux/selinux-policy/issues/2362
---
 bootupd.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bootupd.yaml b/bootupd.yaml
index f1692b2..9e6b6fa 100644
--- a/bootupd.yaml
+++ b/bootupd.yaml
@@ -30,3 +30,6 @@ postprocess:
     EOF
     chmod 644 /usr/lib/systemd/system/bootloader-update.service
     echo "enable bootloader-update.service" > /usr/lib/systemd/system-preset/81-atomic-desktop.preset
+
+    # Turn permissive mode on for bootupd until all SELinux issues are fixed
+    semanage permissive --noreload --add bootupd_t