From 00e2197f32c5bd75a0af3ef6c144ddc34ab75c2d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Tue, 24 Dec 2024 04:55:16 +0100
Subject: [PATCH] rpm: adjust SELinux snippets for relabeling

Adjust according to https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Creating_the_Spec_File

Specifically, when %selinux_relabel_post is used, %selinux_relabel_pre
needs to be there too.

QubesOS/qubes-issues#9663
---
 rpm_spec/qubes-db-vm.spec.in | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/rpm_spec/qubes-db-vm.spec.in b/rpm_spec/qubes-db-vm.spec.in
index abb4db6..80ac384 100644
--- a/rpm_spec/qubes-db-vm.spec.in
+++ b/rpm_spec/qubes-db-vm.spec.in
@@ -62,6 +62,9 @@ SELinux enforcing in a qube.
 %{_datadir}/selinux/devel/include/contrib/ipp-qubes-core-qubesdb.if
 %{qubes_db_vm_selinux}
 
+%pre selinux
+%selinux_relabel_pre
+
 %post selinux
 %selinux_modules_install %{qubes_db_vm_selinux}