[solved] SELinux default policy relabel is required

Begonnen von kole, 2019/06/26, 18:50:01

Vorheriges Thema - Nächstes Thema

DeepDayze

Setting SELINUX=disabled in the config file should also work to inactivate SELINUX as well.

dibl

Reading [here], I see this:

Zitat6. Kernel parameters for changing SELinux modes at boot:
autorelabel=1 → forces the system to relabel
selinux=0 → kernel doesn't load any part of the SELinux infrastructure
enforcing=0 → boot in permissive mode

So, by logic, if selinux=0 fixed a boot problem, then the existing selinux infrastructure which worked for kernel 5.0.14 broke 5.1.  That looks like some kernel development in 5.1 is a violation of the selinux infrastructe that was OK for 5.0.14 and many prior kernels. Maybe kernel devs need to talk with selinux devs.
System76 Oryx Pro, Intel Core i7-11800H, ASRock B860 Pro-A, Intel Core Ultra 7 265KF, Nvidia GTX-1060, SSD 990 EVO Plus.

sidemmc

Found semanage.conf   in:   libsemanage-common  2.8-2 - all