Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set SELinux enforcing mode #2179

Open
frelon opened this issue Sep 9, 2024 · 1 comment
Open

Set SELinux enforcing mode #2179

frelon opened this issue Sep 9, 2024 · 1 comment
Assignees

Comments

@frelon
Copy link
Contributor

frelon commented Sep 9, 2024

SELinux enforcing mode was removed from green flavor in 1114b12 while trying to get all tests working.

The goal is to reenable SELinux enforcing mode for green flavor.

@frelon frelon self-assigned this Sep 9, 2024
@frelon frelon changed the title Reenable selinux Set SELinux enforcing mode Sep 9, 2024
@frelon
Copy link
Contributor Author

frelon commented Sep 20, 2024

Pausing this for now. Some key takeaways from debugging this issue:

  • The error encountered is Non unix-domain-socket passed as listener, in the dbus-broker service during boot.
  • When starting a service that depends on dbus-broker after logging into the machine, dbus-broker is started without any error.
  • The same error is found when trying to boot ubuntu 21.10 with selinux tools installed and booting in enforcing mode.
  • It works when booting into systemd-rescue first and then exiting and booting into the active system.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: 💡 Backlog
Development

Successfully merging a pull request may close this issue.

1 participant