Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Allow SELinux to stay enabled

Browse Source 
Users who have their own SELinux policies should be able to keep QubesOS
from disabling SELinux.
This commit is contained in:
Demi Marie Obenour 2020-12-14 12:47:37 -05:00
parent b15ff53bc6
commit 9bcfc5dc9f
No known key found for this signature in database
GPG Key ID: 28A45C93B0B5B6E0
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
rpm_spec/core-agent.spec.in
View File

@ -492,10 +492,15 @@ fi
exit 0
%triggerin -- selinux-policy
#echo "--> Disabling SELinux..."
sed -e s/^SELINUX=.*$/SELINUX=disabled/ </etc/selinux/config >/etc/selinux/config.processed
mv /etc/selinux/config.processed /etc/selinux/config
setenforce 0 2>/dev/null
. /usr/lib/qubes/init/functions
if ! is_protected_file /etc/selinux/config; then
echo "--> Disabling SELinux..."
sed -e s/^SELINUX=.*$/SELINUX=disabled/ </etc/selinux/config >/etc/selinux/config.processed
mv /etc/selinux/config.processed /etc/selinux/config
setenforce 0 2>/dev/null
fi
exit 0
%post network-manager