From 1f91f127749848c36fd38b32529994b989c267a8 Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@redhat.com>
Date: Tue, 18 Sep 2018 14:48:33 +0200
Subject: [PATCH] prepare-root.sh: selinux permissive during build

---
 prepare-root.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/prepare-root.sh b/prepare-root.sh
index ab0ae95..5e9ae17 100755
--- a/prepare-root.sh
+++ b/prepare-root.sh
@@ -121,6 +121,7 @@ VERSION_ID="${RELEASEVER}.$(date -u +'%Y%m%d%H%M%S')"
 OUTDIR=${OUTDIR:-"${CURDIR}/${NAME}-${VERSION_ID}"}
 GPGKEY=${GPGKEY:-${NAME}.gpg}
 REPOSD=${REPOSD:-/etc/yum.repos.d}
+readonly OLD_SELINUX=$(getenforce)
 
 [[ $TMPDIR ]] || TMPDIR=/var/tmp
 readonly TMPDIR="$(realpath -e "$TMPDIR")"
@@ -143,12 +144,15 @@ trap '
        [[ -d "$i" ]] && mountpoint -q "$i" && umount "$i"
     done
     [[ $MY_TMPDIR ]] && rm -rf --one-file-system -- "$MY_TMPDIR"
+    setenforce $OLD_SELINUX
     exit $ret;
     ' EXIT
 
 # clean up after ourselves no matter how we die.
 trap 'exit 1;' SIGINT
 
+setenforce 0
+
 if ! [[ -f "${BASEDIR}"/linuxx64.efi.stub ]]; then
     cp /lib/systemd/boot/efi/linuxx64.efi.stub "${BASEDIR}"/linuxx64.efi.stub
 fi
@@ -584,3 +588,4 @@ cat > "${OUTDIR%/*}/${NAME}-latest.json" <<EOF
 EOF
 
 chown "$USER" "${OUTDIR%/*}/${NAME}-latest.json"
+setenforce $OLD_SELINUX