Skip to content

Conversation

@dorileo
Copy link
Member

@dorileo dorileo commented Mar 31, 2025

Introduce a guest-agent selinux policy. Build and packaging to follow in an upcoming PR.

To manually build and install, in a EL 9 system do:

  • install policycoreutils-devel package
  • cd selinux && make -f /usr/share/selinux/devel/Makefile google_guest_agent.pp
  • sudo /usr/sbin/semodule -i google_guest_agent.pp
  • sudo restorecon /usr/bin/google_metadata_*
  • sudo systemctl restart google-guest-agent && sudo systemctl restart google-guest-agent-manager

@dorileo
Copy link
Member Author

dorileo commented Mar 31, 2025

/hold

@google-oss-prow
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dorileo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Introduce a guest-agent selinux policy. Build and packaging to follow
in an upcoming PR.

To manually build and install, in a EL 9 system do:
 - install policycoreutils-devel package
 - cd selinux && make -f /usr/share/selinux/devel/Makefile google_guest_agent.pp
 - sudo /usr/sbin/semodule -i google_guest_agent.pp
 - sudo restorecon /usr/bin/google_metadata_*
 - sudo systemctl restart google-guest-agent && sudo systemctl restart google-guest-agent-manager
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant