titanz/QubesOS-Scripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Simplify SELinux instructions

Browse Source
This commit is contained in:
Tommy
2024-11-12 06:15:10 -07:00
committed by GitHub
parent 7b8f77e399
commit e7ef3a8194
2 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
fedora-minimal/README.md
View File

@@ -1,10 +1,8 @@
# Enable SELinux
To enable SELinux, do the following after you have run fedora-minimal.sh:
- Shutdown the VM
- Shutdown the VM.
- Run `qvm-features fedora-40-minimal selinux 1`.
- Start the minimal vm. Wait for it to shut itself down.
- Run `qvm-features fedora-40-minimal selinux 0`.
- Turn the VM on, remove `/.autorelabel`.
- Turn the VM off.
- Run `qvm-features fedora-40-minimal selinux 1`.
- Start the minimal VM.
- Edit /etc/sysconfig/selinux and change SELINUX mode to enforcing.
- Restart the VM.

3
fedora-minimal/fedora-minimal.sh
View File

@@ -66,5 +66,4 @@ echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload
sudo chmod 644 /etc/ld.so.preload
# Prepare for SELinux
sudo touch /.autorelabel
sudo sed -i 's/SELINUX=permissive/SELINUX=enforcing/' /etc/sysconfig/selinux
sudo touch /.autorelabel