Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

selinux-activate not working on RaspbianOS bullseye (version 11) #411

Open
waschaly opened this issue Sep 29, 2023 · 1 comment
Open

selinux-activate not working on RaspbianOS bullseye (version 11) #411

waschaly opened this issue Sep 29, 2023 · 1 comment

Comments

@waschaly
Copy link

currently the command selinux-activate looks - if you want to activate SELinux - for two files
either for
GRUB_CONF=/boot/grub/menu.lst
If $GRUB_CONF exists adding the line 'security=selinux' and do an update-grub

if $GRUB_CONF doesn't exist look for
GRUB2_CONF=/etc/default/grub
and add selinux=1 and security=selinux

Unfortunately none of the GRUB Files exist an RasopbianOS bullyeye

@cgzones
Copy link
Contributor

cgzones commented Oct 19, 2023

The script selinux-activate is not part of upstream SELinux userland, but part of the Debian package selinux-basics (see https://packages.debian.org/sid/all/selinux-basics/filelist).

I proposed an improved feedback awhile ago (https://salsa.debian.org/selinux-team/selinux-basics/-/merge_requests/1/diffs?commit_id=7f945c4ef9024436df7a65a89da27e7ddd8689e9).

Beyond that you'd have to activate SELinux yourself or propose a patch to handle Raspberry Pi OS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants