Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set selinux policy to permissive #808

Closed
wants to merge 1 commit into from

Conversation

jovial
Copy link
Contributor

@jovial jovial commented Nov 29, 2023

This will avoid the need for a reboot:

TASK [selinux : Ensure desired SELinux state] **********************************************************************************************************************[36/1977]
Wednesday 29 November 2023  12:45:39 +0100 (0:00:00.850)       0:01:15.944 ****                                                                                              
[WARNING]: Reboot is required to set SELinux state to 'permissive'
changed: [monitor1]                                                                   
                                                                                      
TASK [selinux : Abort SELinux configuration because reboot is disabled] *****************************************************************************************************
Wednesday 29 November 2023  12:45:41 +0100 (0:00:01.457)       0:01:17.401 **** 
fatal: [monitor1]: FAILED! => changed=false               
  msg: |-                                                                             
    SELinux state change requires a reboot, but selinux_do_reboot is false. Please run again with selinux_do_reboot set to true to reboot.

This will avoid the need for a reboot:

```
TASK [selinux : Ensure desired SELinux state] **********************************************************************************************************************[36/1977]
Wednesday 29 November 2023  12:45:39 +0100 (0:00:00.850)       0:01:15.944 ****                                                                                              
[WARNING]: Reboot is required to set SELinux state to 'permissive'
changed: [monitor1]                                                                   
                                                                                      
TASK [selinux : Abort SELinux configuration because reboot is disabled] *****************************************************************************************************
Wednesday 29 November 2023  12:45:41 +0100 (0:00:01.457)       0:01:17.401 **** 
fatal: [monitor1]: FAILED! => changed=false               
  msg: |-                                                                             
    SELinux state change requires a reboot, but selinux_do_reboot is false. Please run again with selinux_do_reboot set to true to reboot.

```
@jovial jovial requested a review from a team as a code owner November 29, 2023 11:52
@jovial jovial marked this pull request as draft November 29, 2023 11:55
@jovial
Copy link
Contributor Author

jovial commented Nov 29, 2023

@markgoddard
Copy link
Contributor

I did something similar in #790. The main difference is I only set to permissive on RL9. This aligns with #793.

The main issue is that the image includes RL9.3, whereas our snapshots are still 9.2. I tried pinning the repos in the image but it didn't work.

@jovial
Copy link
Contributor Author

jovial commented Nov 29, 2023

Closing as I wasn't aware of the other PR. Thought this would be a quick fix to save some reboots, but fixing to package snapshots seems like a bigger task.

@jovial jovial closed this Nov 29, 2023
@jovial jovial deleted the bugfix/yoga/selinux-policy branch November 29, 2023 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants