Investigate systemd-container-coredump SELinux module not getting installed properly during 4.15 base compose

[jlebon]

E.g. the systemd RPM in 9.2 has:

%post
...
# Install our own selinux-policy module that allows systemd-coredump access to containers
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2

But for some reason, when investigating the resulting policy, the module doesn't seem there. (E.g. it should show up in /etc/selinux/targeted/active/modules/200, but doesn't.)

For now, we've added a workaround in the selinux-policy-targeted package directly, but we should debug why this didn't work.

[jlebon]

I would probably start by seeing if we can reproduce this against the latest development branch.

[travier]

We bissected this to:

• Working: 4.15.28 -> 415.92.202408100433-0
• Broken: 4.15.29 -> 415.92.202408201734-0