Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SELinux is in permissive mode for live-installer #460

Open
AdamWill opened this issue Feb 21, 2024 · 2 comments
Open

SELinux is in permissive mode for live-installer #460

AdamWill opened this issue Feb 21, 2024 · 2 comments
Assignees
Labels
bug Something isn't working

Comments

@AdamWill
Copy link
Contributor

I just hooked up openQA testing of the osbuild-built Fedora Workstation live image (the one from https://fedoraproject.org/wiki/Changes/FedoraWorkstationImageBuilder ), and it found a bug right away. (Finally, after about five years of having it, this test failed on something!)

After running an install from the image, on the installed system, SELinux is in permissive mode. By policy SELinux must be in enforcing mode by default for Fedora installs - this is in the release criteria.

I wasn't sure where would be best to file this, chose this repo as it's where the existing "known issue" mentioned in the Change is filed.

The image tested was https://kojipkgs.fedoraproject.org/compose/branched/Fedora-40-20240220.n.0/compose/Workstation/x86_64/iso/Fedora-Workstation-Live-osb-40-20240220.n.0.x86_64.iso , the test just runs an install, boots the installed system, runs getenforce and checks the output.

@supakeen
Copy link
Member

Thank you @AdamWill. I'll move this to images and take it.

@supakeen supakeen transferred this issue from osbuild/osbuild Feb 22, 2024
@supakeen supakeen self-assigned this Feb 22, 2024
@supakeen supakeen added the bug Something isn't working label Mar 6, 2024
@supakeen supakeen changed the title SELinux is in permissive mode after install from the osbuild-built Fedora Workstation Live image (should be enforcing) SELinux is in permissive mode for live-installer Mar 6, 2024
@AdamWill
Copy link
Contributor Author

ping?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: 📋 Backlog
Development

No branches or pull requests

2 participants