profiles/selinux: disable FEATURE=pid-sandbox

SELinux needs a policy update for pid-sandbox to work. disable the
feature first so emerge can be used.

Signed-off-by: Jason Zaman <perfinion@gentoo.org>

diff --git a/profiles/features/selinux/make.defaults b/profiles/features/selinux/make.defaults
index d3bbd2f25dfada75a744c202a06aad39088f347b..adbf945e3fe3b7669df4d291a7a67f5c93a8f5d1 100644 (file)
--- a/profiles/features/selinux/make.defaults
+++ b/profiles/features/selinux/make.defaults
@@ -5,7 +5,7 @@
 # selinux - Enable SELinux support
 USE="selinux"
 
-FEATURES="selinux sesandbox sfperms"
+FEATURES="selinux sesandbox sfperms -pid-sandbox"
 
 POLICY_TYPES="strict targeted"
 PORTAGE_T="portage_t"