From e7ef3a81945a295740e59c027ad2b3d78bde5127 Mon Sep 17 00:00:00 2001 From: Tommy Date: Tue, 12 Nov 2024 06:15:10 -0700 Subject: [PATCH] Simplify SELinux instructions --- fedora-minimal/README.md | 10 ++++------ fedora-minimal/fedora-minimal.sh | 3 +-- 2 files changed, 5 insertions(+), 8 deletions(-) diff --git a/fedora-minimal/README.md b/fedora-minimal/README.md index 3f3e642..26cf2af 100644 --- a/fedora-minimal/README.md +++ b/fedora-minimal/README.md @@ -1,10 +1,8 @@ # Enable SELinux To enable SELinux, do the following after you have run fedora-minimal.sh: -- Shutdown the VM +- Shutdown the VM. - Run `qvm-features fedora-40-minimal selinux 1`. -- Start the minimal vm. Wait for it to shut itself down. -- Run `qvm-features fedora-40-minimal selinux 0`. -- Turn the VM on, remove `/.autorelabel`. -- Turn the VM off. -- Run `qvm-features fedora-40-minimal selinux 1`. \ No newline at end of file +- Start the minimal VM. +- Edit /etc/sysconfig/selinux and change SELINUX mode to enforcing. +- Restart the VM. \ No newline at end of file diff --git a/fedora-minimal/fedora-minimal.sh b/fedora-minimal/fedora-minimal.sh index 09e0b70..59d11ae 100644 --- a/fedora-minimal/fedora-minimal.sh +++ b/fedora-minimal/fedora-minimal.sh @@ -66,5 +66,4 @@ echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload sudo chmod 644 /etc/ld.so.preload # Prepare for SELinux -sudo touch /.autorelabel -sudo sed -i 's/SELINUX=permissive/SELINUX=enforcing/' /etc/sysconfig/selinux \ No newline at end of file +sudo touch /.autorelabel \ No newline at end of file