Merge pull request #287 from ca-hu/master

Select SELinux as default MAC in enforcing mode
yast · Sep 4, 2024 · 92fa692 · 92fa692
2 parents d000210 + 2ab59ef
commit 92fa692
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 4 deletions.
diff --git a/control/control.xml b/control/control.xml
@@ -80,14 +80,13 @@ textdomain="control"
         <enable_kdump config:type="boolean">true</enable_kdump>
 
         <lsm>
-          <select>apparmor</select>
+          <select>selinux</select>
           <apparmor>
             <patterns>apparmor</patterns>
             <selectable config:type="boolean">true</selectable>
           </apparmor>
-          <!-- Set SELinux permissive mode by default, https://github.com/yast/yast-installation/pull/906#issuecomment-784238549 -->
           <selinux>
-            <mode>permissive</mode>
+            <mode>enforcing</mode>
             <configurable config:type="boolean">true</configurable>
             <selectable config:type="boolean">true</selectable>
             <patterns>selinux</patterns>

diff --git a/package/skelcd-control-openSUSE.changes b/package/skelcd-control-openSUSE.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Sep  3 08:30:52 UTC 2024 - Cathy Hu <[email protected]>
+
+- Set SELinux as default LSM in enforcing mode instead of AppArmor (bsc#1230118)
+
 -------------------------------------------------------------------
 Wed Jul 31 10:26:00 UTC 2024 - Ancor Gonzalez Sosa <[email protected]>
 

diff --git a/package/skelcd-control-openSUSE.spec b/package/skelcd-control-openSUSE.spec
@@ -27,7 +27,7 @@
 #
 ######################################################################
 Name:           skelcd-control-openSUSE
-Version:        20240731
+Version:        20240902
 Release:        0
 Summary:        The openSUSE Installation Control file
 License:        MIT