Bug 56005 - Disable SELinux / boot with selinux=0
Disable SELinux / boot with selinux=0
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Grub
UCS 5.2
Other Linux
: P5 normal (vote)
: UCS 5.0-5-errata
Assigned To: Felix Botner
Julia Bremer
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-04-20 17:50 CEST by Florian Best
Modified: 2023-11-09 13:45 CET (History)
1 user (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2023-04-20 17:50:29 CEST
Selinux is recommended by the isc-dhcp* packages.
    
By installing selinux-utils, the configuration for selinux is installed
sestatus therefore sees selinux as enabled, even though selinux itself is
not even installed.

we have to disable selinux:
/etc/default/grub:
+defoptions += ' selinux=0'  # Disable selinux
 print('GRUB_CMDLINE_LINUX_DEFAULT="%s"' % defoptions)
Comment 2 Felix Botner univentionstaff 2023-11-07 18:27:41 CET
Successful build
Package: univention-base-files
Version: 9.0.5-6
Branch: ucs_5.0-0
Scope: errata5.0-5

disabled by SELinux by /etc/selinux/config SELINUX=disabled
Comment 3 Julia Bremer univentionstaff 2023-11-09 10:28:48 CET
OK: Upgrade from 5.0-5 works
OK: New installation of 5.2 works
OK: Workarounds were removed
OK: DVD installation
OK: Enabling selinux not possible (overwritten by ucr template)

Verified