search

SELinuxProject / selinux

This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to selinux@vger.kernel.org
Other
1.33k stars 359 forks source link

selinux-activate not working on RaspbianOS bullseye (version 11) #411

Open waschaly opened 1 year ago

waschaly commented 1 year ago

currently the command selinux-activate looks - if you want to activate SELinux - for two files either for GRUB_CONF=/boot/grub/menu.lst If $GRUB_CONF exists adding the line 'security=selinux' and do an update-grub

if $GRUB_CONF doesn't exist look for GRUB2_CONF=/etc/default/grub and add selinux=1 and security=selinux

Unfortunately none of the GRUB Files exist an RasopbianOS bullyeye

cgzones commented 11 months ago

The script selinux-activate is not part of upstream SELinux userland, but part of the Debian package selinux-basics (see https://packages.debian.org/sid/all/selinux-basics/filelist).

I proposed an improved feedback awhile ago (https://salsa.debian.org/selinux-team/selinux-basics/-/merge_requests/1/diffs?commit_id=7f945c4ef9024436df7a65a89da27e7ddd8689e9).

Beyond that you'd have to activate SELinux yourself or propose a patch to handle Raspberry Pi OS.