Thanks for the tutorial! I updated the certificates only, to keep my Max2 internet-worthy.
One caveat, though. The use of
chcon requires the host OS to have a SELinux enabled kernel.
If that's not the case (as in stock Arch Linux), it's possible to simply set the corresponding SELinux extended attribute for each file.
For example:
Code:
setfattr -n security.selinux -v u:object_r:system_file:s0 /mnt/etc/security/cacerts/*.0
That is, simply replace
chcon with
setfattr -n security.selinux -v in the scripts and you'll be fine.
Thanks to
https://unix.stackexchange.com/q/280671 for the tip.