No worries, I will ask on the proper channel now that I see the smoking gun :-) Thanks for looking into this! --Jose -----Original Message----- From: Thomas Cameron <thomas.cameron@xxxxxxxxxxxxxxx> Sent: Tuesday, September 17, 2019 17:14 To: Nunez Zuleta, Jose V: IT (NYK) <jose.nunez-zuleta@xxxxxxxxxxxx>; selinux@xxxxxxxxxxxxxxxxxxxxxxx Subject: Re: SELinux disabled after installation through Kickstart This mail originated from outside our organisation - thomas.cameron@xxxxxxxxxxxxxxx On 9/17/19 2:51 PM, jose.nunez-zuleta@xxxxxxxxxxxx wrote: > Hello Thomas, > > I think I don't have any SELINUX support on the kernel: > > [root@X ~]# egrep CONFIG_SECURITY_SELINUX /lib/modules/$(uname > -r)/config > > I tried with an older kernel on a different machine: > > [root ~@Y]$ egrep SELI /boot/config-3.10.0-693.11.6.el7.x86_64 > CONFIG_SECURITY_SELINUX=y > CONFIG_SECURITY_SELINUX_BOOTPARAM=y > CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1 > CONFIG_SECURITY_SELINUX_DISABLE=y > CONFIG_SECURITY_SELINUX_DEVELOP=y > CONFIG_SECURITY_SELINUX_AVC_STATS=y > CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 > # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set > > But again this is an old kernel. Do the modules stayed the same? > > Thanks! This is a question best asked on a kernel mailing list. I'd love to dive in and hammer on this, but the rest of the list members probably don't want to see us troubleshooting kernel builds. Or, if you like, e-mail me off list and I'll see if I can help. TC _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ This message is for information purposes only, it is not a recommendation, advice, offer or solicitation to buy or sell a product or service nor an official confirmation of any transaction. It is directed at persons who are professionals and is not intended for retail customer use. Intended for recipient only. This message is subject to the terms at: www.barclays.com/emaildisclaimer. For important disclosures, please see: www.barclays.com/salesandtradingdisclaimer regarding market commentary from Barclays Sales and/or Trading, who are active market participants; and in respect of Barclays Research, including disclosures relating to specific issuers, please see http://publicresearch.barclays.com. ______________________________________________________________________________________________________________________________________________________________________ If you are incorporated or operating in Australia, please see https://www.home.barclays/disclosures/importantapacdisclosures.html for important disclosure. ______________________________________________________________________________________________________________________________________________________________________ ______________________________________________________________________________________________________________________________________________________________________ How we use personal information see our privacy notice https://www.investmentbank.barclays.com/disclosures/personalinformationuse.html _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ _______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
