Skip to content

Investigate SELinux Enforcing mode in Live ISO #79

@hanthor

Description

@hanthor

The Live ISO may require enforcing=0 (permissive mode) to properly handle disk operations during the installation process.

Current builds have been switched back to enforcing mode to align with security standards for the installed OS. However, initial tests and existing workarounds suggest that the live overlay environment and disk partitioning/formatting tools may encounter denials under the default EL10 policy.

Tasks:

  • Verify if Anaconda/disk operations fail in the Live ISO when SELinux is enforcing.
  • Identify specific denials (e.g., Varlink sockets, loop device management).
  • Determine if these should be fixed in the upstream COPR policy repo or if the Live ISO should explicitly boot with enforcing=0.
  • If permissive mode is required, ensure it is restricted ONLY to the Live ISO boot parameters and not carried over to the installed system's grub config.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions