Actions
action #169591
openaction #166613: Yast default selected LSM changes from Apparmor to SELinux, existing openQA test fails in first_boot
[qe-core] Introduce selinux_* methods in version_utils
Status:
Feedback
Priority:
Normal
Assignee:
Category:
Refactor/Code Improvements
Target version:
Start date:
2024-11-08
Due date:
% Done:
0%
Estimated time:
Difficulty:
Description
Motivation¶
From: https://progress.opensuse.org/issues/168703#note-3
IMO there should be something in version_utils that returns whether SELinux is enabled by default. If needed with some more primitives on top like selinux_is_active and selinux_needs_to_be_enabled.
Suggestions:¶
Selinux is enabled by default in:
- Tumbleweed
- MicroOS
- SL Micro 6+
SLE 16+
Have a chat with Cathy/Fabian
See how selinux_*
Check
ENABLE_SELINUX
and (imo it should beSELINUX
to keep naming convention)- 'transactional/enable_selinux'
- 'installation/enable_selinux'
See and possibly incorporate changes introduced by @cahu https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/20125
Acceptance criteria¶
- Add unit tests when adding the helper functions as necessary
- Adapt transactional/enable_selinux and installation/enable_selinux as necessary
- Keep qe-security in the loop
Actions