Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-08-03 20:44:14 -04:00
Code Issues Projects Releases Packages Wiki Activity

Set SELinux from disabled to permissive (#474)

Browse source
This commit is contained in:
Malte Poll 2022-11-09 12:04:58 +01:00 • committed by GitHub
parent 46a8e8d424
commit 9e12e004bb
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
image/mkosi.conf.d/selinux.conf Normal file
View file

@ -0,0 +1,3 @@
[Output]
# set selinux to permissive
KernelCommandLine=!selinux=0 selinux=1 enforcing=0

3
image/mkosi.prepare
View file

@ -1,5 +1,8 @@
#!/bin/sh
set -euxo pipefail
# set selinux to permissive
sed -i 's/^SELINUX=.*/SELINUX=permissive/' /etc/selinux/config
# backport of https://github.com/dracutdevs/dracut/commit/dcbe23c14d13ca335ad327b7bb985071ca442f12
sed -i 's/WantedBy=multi-user.target/WantedBy=basic.target/' /usr/lib/systemd/system/systemd-resolved.service