1
0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-12-21 22:51:33 -05:00

Simplify SELinux instructions

This commit is contained in:
Tommy 2024-11-12 06:15:10 -07:00 committed by GitHub
parent 7b8f77e399
commit e7ef3a8194
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 5 additions and 8 deletions

View File

@ -1,10 +1,8 @@
# Enable SELinux
To enable SELinux, do the following after you have run fedora-minimal.sh:
- Shutdown the VM
- Shutdown the VM.
- Run `qvm-features fedora-40-minimal selinux 1`.
- Start the minimal vm. Wait for it to shut itself down.
- Run `qvm-features fedora-40-minimal selinux 0`.
- Turn the VM on, remove `/.autorelabel`.
- Turn the VM off.
- Run `qvm-features fedora-40-minimal selinux 1`.
- Start the minimal VM.
- Edit /etc/sysconfig/selinux and change SELINUX mode to enforcing.
- Restart the VM.

View File

@ -66,5 +66,4 @@ echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload
sudo chmod 644 /etc/ld.so.preload
# Prepare for SELinux
sudo touch /.autorelabel
sudo sed -i 's/SELINUX=permissive/SELINUX=enforcing/' /etc/sysconfig/selinux
sudo touch /.autorelabel