repo/gentoo:master commit in: app-containers/podman/

commit:     3124944a22edc82530138260e56be70d33d9886d
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Aug  5 20:48:53 2026 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Aug  5 20:48:53 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3124944a

app-containers/podman: fix SELinux support

For SELinux, refpolicy has its own container policy which is different
from what upstream podman uses at https://github.com/containers/container-selinux.

SELINUXOPT controls this and seemingly nothing else. selinux-go doesn't
seem to use libselinux either. So, just keep USE=selinux for the policy
dep (which is an exemption to the "no runtime USE flags" rule that we do
in various places).

Closes: https://bugs.gentoo.org/980034
Signed-off-by: Sam James <sam <AT> gentoo.org>

 app-containers/podman/podman-6.0.2.ebuild | 6 +++---
 app-containers/podman/podman-9999.ebuild  | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/app-containers/podman/podman-6.0.2.ebuild b/app-containers/podman/podman-6.0.2.ebuild
index 3d85cc9941ae..9e0c4ede01d5 100644
--- a/app-containers/podman/podman-6.0.2.ebuild
+++ b/app-containers/podman/podman-6.0.2.ebuild
@@ -42,7 +42,7 @@ RDEPEND="
 	btrfs? ( sys-fs/btrfs-progs )
 	wrapper? ( !app-containers/docker-cli )
 	seccomp? ( sys-libs/libseccomp:= )
-	selinux? ( sec-policy/selinux-podman sys-libs/libselinux:= )
+	selinux? ( sec-policy/selinux-podman )
 	systemd? ( sys-apps/systemd:= )
 "
 DEPEND="${RDEPEND}"
@@ -105,12 +105,12 @@ src_compile() {
 		tc-export PKG_CONFIG
 	fi
 
-	emake BUILDFLAGS="-v -work -x" GOMD2MAN="go-md2man" EXTRA_BUILDTAGS="$(usev seccomp)" \
+	emake BUILDFLAGS="-v -work -x" GOMD2MAN="go-md2man" EXTRA_BUILDTAGS="$(usev seccomp)" SELINUXOPT= \
 		  all $(usev wrapper docker-docs)
 }
 
 src_install() {
-	emake DESTDIR="${D}" install install.completions $(usev wrapper install.docker-full)
+	emake DESTDIR="${D}" SELINUXOPT= install install.completions $(usev wrapper install.docker-full)
 
 	newconfd "${FILESDIR}"/podman-5.0.0_rc4.confd podman
 	newinitd "${FILESDIR}"/podman-5.0.0_rc4.initd podman

diff --git a/app-containers/podman/podman-9999.ebuild b/app-containers/podman/podman-9999.ebuild
index 3d85cc9941ae..9e0c4ede01d5 100644
--- a/app-containers/podman/podman-9999.ebuild
+++ b/app-containers/podman/podman-9999.ebuild
@@ -42,7 +42,7 @@ RDEPEND="
 	btrfs? ( sys-fs/btrfs-progs )
 	wrapper? ( !app-containers/docker-cli )
 	seccomp? ( sys-libs/libseccomp:= )
-	selinux? ( sec-policy/selinux-podman sys-libs/libselinux:= )
+	selinux? ( sec-policy/selinux-podman )
 	systemd? ( sys-apps/systemd:= )
 "
 DEPEND="${RDEPEND}"
@@ -105,12 +105,12 @@ src_compile() {
 		tc-export PKG_CONFIG
 	fi
 
-	emake BUILDFLAGS="-v -work -x" GOMD2MAN="go-md2man" EXTRA_BUILDTAGS="$(usev seccomp)" \
+	emake BUILDFLAGS="-v -work -x" GOMD2MAN="go-md2man" EXTRA_BUILDTAGS="$(usev seccomp)" SELINUXOPT= \
 		  all $(usev wrapper docker-docs)
 }
 
 src_install() {
-	emake DESTDIR="${D}" install install.completions $(usev wrapper install.docker-full)
+	emake DESTDIR="${D}" SELINUXOPT= install install.completions $(usev wrapper install.docker-full)
 
 	newconfd "${FILESDIR}"/podman-5.0.0_rc4.confd podman
 	newinitd "${FILESDIR}"/podman-5.0.0_rc4.initd podman