From 629140cdadbe016257bcfbe5b8ff0709aac1620e Mon Sep 17 00:00:00 2001
From: Hector Martin <marcan@fedoraproject.org>
Date: Dec 19 2023 12:09:02 +0000
Subject: Add missing SELinux policies to swap volume/file setup


This fixes systemd-logind SELinux denials. We just use var_t for the
subvolume root (other stuff in /var/* does this too, so it should be
OK).

---

diff --git a/fedora-asahi-remix-scripts.spec b/fedora-asahi-remix-scripts.spec
index 127816d..794bcb0 100644
--- a/fedora-asahi-remix-scripts.spec
+++ b/fedora-asahi-remix-scripts.spec
@@ -1,5 +1,5 @@
 Name:           fedora-asahi-remix-scripts
-Version:        20231218
+Version:        20231219
 Release:        1%{?dist}
 Summary:        Fedora Asahi Remix utility scripts
 
@@ -48,6 +48,9 @@ install -Dpm0755 -t %{buildroot}%{_libexecdir}/%{name} setup-swap.sh
 %{_libexecdir}/%{name}/
 
 %changelog
+* Tue Dec 19 2023 Hector Martin <marcan@fedoraproject.org> - 20231219-1
+- Add SELinux policies to swap setup script
+
 * Mon Dec 18 2023 Hector Martin <marcan@fedoraproject.org> - 20231218-1
 - Add swap setup script
 
diff --git a/setup-swap.sh b/setup-swap.sh
index 1041841..f99d6c0 100755
--- a/setup-swap.sh
+++ b/setup-swap.sh
@@ -17,6 +17,11 @@ btrfs subvolume create /var/swap
 chattr +C /var/swap
 fallocate -l "$size" /var/swap/swapfile
 chmod 0600 /var/swap/swapfile
+
+semanage fcontext -a -t var_t -f d '/var/swap' || true
+semanage fcontext -a -t swapfile_t -f f '/var/swap/swapfile' || true
+restorecon -v -r '/var/swap'
+
 mkswap /var/swap/swapfile
 swapon /var/swap/swapfile
 grep -q /var/swap/swapfile /etc/fstab || echo '/var/swap/swapfile swap swap sw 0 0' >> /etc/fstab