osbuild / images

Image builder image definition library
Apache License 2.0
21 stars 49 forks source link

SELinux is in permissive mode for `live-installer` #460

Closed AdamWill closed 1 month ago

AdamWill commented 7 months ago

I just hooked up openQA testing of the osbuild-built Fedora Workstation live image (the one from https://fedoraproject.org/wiki/Changes/FedoraWorkstationImageBuilder ), and it found a bug right away. (Finally, after about five years of having it, this test failed on something!)

After running an install from the image, on the installed system, SELinux is in permissive mode. By policy SELinux must be in enforcing mode by default for Fedora installs - this is in the release criteria.

I wasn't sure where would be best to file this, chose this repo as it's where the existing "known issue" mentioned in the Change is filed.

The image tested was https://kojipkgs.fedoraproject.org/compose/branched/Fedora-40-20240220.n.0/compose/Workstation/x86_64/iso/Fedora-Workstation-Live-osb-40-20240220.n.0.x86_64.iso , the test just runs an install, boots the installed system, runs getenforce and checks the output.

supakeen commented 7 months ago

Thank you @AdamWill. I'll move this to images and take it.

AdamWill commented 3 months ago

ping?