Enhancement #3400

Fully disable SELinux

Added by Giacomo Sanchietti about 5 years ago. Updated about 5 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-base
Target version:v6.8-final
Resolution: NEEDINFO:No

Description

When SELinux is enabled in permissive mode, the system logs many useless entries inside /var/log/audit.log.

Backport from NS 7 the commit to fully disable selinux:
https://github.com/NethServer/nethserver-base/commit/95595638ef9fdb0b100c1cde0bcdac25807e915c

Associated revisions

Revision bb93e58d
Added by Giacomo Sanchietti about 5 years ago

Totally disable SELinux

History

#1 Updated by Giacomo Sanchietti about 5 years ago

  • Status changed from NEW to TRIAGED
  • % Done changed from 0 to 20

#2 Updated by Giacomo Sanchietti about 5 years ago

  • Status changed from TRIAGED to ON_DEV
  • Assignee set to Giacomo Sanchietti
  • % Done changed from 20 to 30

#3 Updated by Giacomo Sanchietti about 5 years ago

  • Category set to nethserver-base
  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

Commit has been backported.

#4 Updated by Giacomo Sanchietti about 5 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Giacomo Sanchietti)
  • % Done changed from 60 to 70

In nethserver-testing: *

Test case
  • Install the script
  • Reboot the machine
  • Check selinux is disabled:
    • This command must return "SELINUX=disabled"
      grep SELINUX= /etc/selinux/config
      
    • This command must return "Disabled"
      getenforce
      

#5 Updated by Davide Principi about 5 years ago

  • Status changed from ON_QA to VERIFIED
  • % Done changed from 70 to 90

VERIFIED

nethserver-base-2.10.3-1.2.gbb93e58.ns6.noarch.rpm

#6 Updated by Giacomo Sanchietti about 5 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
Released in 6.8/nethserver-base:
  • nethserver-base-2.10.4-1.ns6.noarch.rpm

#7 Updated by Davide Principi about 5 years ago

  • Target version changed from v6.8-beta1 to v6.8-final

Also available in: Atom PDF