fix: register canonical SELinux socket path and pass staticcheck

This commit is contained in:
Lemon-miaow committed 2026-10-07 03:07:35 +08:00
1 parent 296c7bb274
commit 3327c13429
3 files changed
+27 -4

No files matched your search

+3 -2
View File
@@ -5238,8 +5238,9 @@ EOF_NODE_SELINUX
d /run/felis-node-control 0750 root 65532 -
EOF_NODE_TMP
if [ -n "$selinux_environment" ] && command -v semanage >/dev/null 2>&1; then
semanage fcontext -a -t felis_node_control_socket_t '/run/felis-node-control(/.*)?' 2>/dev/null \
|| semanage fcontext -m -t felis_node_control_socket_t '/run/felis-node-control(/.*)?'
# /run is an SELinux equivalence alias for /var/run. Register the canonical path.
semanage fcontext -a -t felis_node_control_socket_t '/var/run/felis-node-control(/.*)?' 2>/dev/null \
|| semanage fcontext -m -t felis_node_control_socket_t '/var/run/felis-node-control(/.*)?'
fi
if [ -n "$selinux_environment" ] && command -v chcon >/dev/null 2>&1; then
chcon -R -t felis_node_control_socket_t /run/felis-node-control 2>/dev/null || true