RE: SELinux disabled after installation through Kickstart

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



No worries, I will ask on the proper channel now that I see the smoking gun :-)

Thanks for looking into this!

--Jose

-----Original Message-----
From: Thomas Cameron <thomas.cameron@xxxxxxxxxxxxxxx> 
Sent: Tuesday, September 17, 2019 17:14
To: Nunez Zuleta, Jose V: IT (NYK) <jose.nunez-zuleta@xxxxxxxxxxxx>; selinux@xxxxxxxxxxxxxxxxxxxxxxx
Subject: Re: SELinux disabled after installation through Kickstart


This mail originated from outside our organisation - thomas.cameron@xxxxxxxxxxxxxxx

On 9/17/19 2:51 PM, jose.nunez-zuleta@xxxxxxxxxxxx wrote:
> Hello Thomas,
>
> I think I don't have any SELINUX support on the kernel:
>
> [root@X ~]# egrep CONFIG_SECURITY_SELINUX /lib/modules/$(uname 
> -r)/config
>
> I tried with an older kernel on a different machine:
>
> [root ~@Y]$ egrep SELI /boot/config-3.10.0-693.11.6.el7.x86_64
> CONFIG_SECURITY_SELINUX=y
> CONFIG_SECURITY_SELINUX_BOOTPARAM=y
> CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
> CONFIG_SECURITY_SELINUX_DISABLE=y
> CONFIG_SECURITY_SELINUX_DEVELOP=y
> CONFIG_SECURITY_SELINUX_AVC_STATS=y
> CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
> # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set
>
> But again this is an old kernel. Do the modules stayed the same?
>
> Thanks!

This is a question best asked on a kernel mailing list. I'd love to dive in and hammer on this, but the rest of the list members probably don't want to see us troubleshooting kernel builds.

Or, if you like, e-mail me off list and I'll see if I can help.

TC


_________________________________________________________________________________________________________________________________________________________________________________________________________________________________

This message is for information purposes only, it is not a recommendation, advice, offer or solicitation to buy or sell a product or service nor an official confirmation of any transaction. It is directed at persons who are professionals and is not intended for retail customer use. Intended for recipient only. This message is subject to the terms at: www.barclays.com/emaildisclaimer.

For important disclosures, please see: www.barclays.com/salesandtradingdisclaimer regarding market commentary from Barclays Sales and/or Trading, who are active market participants; and in respect of Barclays Research, including disclosures relating to specific issuers, please see http://publicresearch.barclays.com.

______________________________________________________________________________________________________________________________________________________________________
If you are incorporated or operating in Australia, please see https://www.home.barclays/disclosures/importantapacdisclosures.html for important disclosure.
______________________________________________________________________________________________________________________________________________________________________
______________________________________________________________________________________________________________________________________________________________________
How we use personal information  see our privacy notice https://www.investmentbank.barclays.com/disclosures/personalinformationuse.html
_________________________________________________________________________________________________________________________________________________________________________________________________________________________________
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux