Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-02 10:35:08 -05:00
Code Issues Packages Projects Releases Wiki Activity

Set SELinux from disabled to permissive (#474)

Browse Source
This commit is contained in:
Malte Poll 2022-11-09 12:04:58 +01:00 committed by GitHub
parent 46a8e8d424
commit 9e12e004bb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
debugd/internal/debugd/constants.go
View File

@ -27,7 +27,6 @@ RemainAfterExit=yes
Restart=on-failure
EnvironmentFile=/run/constellation.env
Environment=PATH=/run/state/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
ExecStartPre=-setenforce Permissive
ExecStart=/run/state/bin/bootstrapper
[Install]
WantedBy=multi-user.target

3
image/mkosi.conf.d/selinux.conf Normal file
View File

@ -0,0 +1,3 @@
[Output]
# set selinux to permissive
KernelCommandLine=!selinux=0 selinux=1 enforcing=0

3
image/mkosi.prepare
View File

@ -1,5 +1,8 @@
#!/bin/sh
set -euxo pipefail
# set selinux to permissive
sed -i 's/^SELINUX=.*/SELINUX=permissive/' /etc/selinux/config
# backport of https://github.com/dracutdevs/dracut/commit/dcbe23c14d13ca335ad327b7bb985071ca442f12
sed -i 's/WantedBy=multi-user.target/WantedBy=basic.target/' /usr/lib/systemd/system/systemd-resolved.service