Re: [Fedora-livecd-list] selinux set to permissive in kickstart, but ISO says it's in enforcing mode
On Tue, 2009-09-01 at 17:02 -0400, Patrice Guay wrote:
Peter Scheie wrote:
> I'm trying to build a Centos livecd that will mostly call anaconda with
> a kickstart file on an http server. I modified the
> centos-livecd-minimal.ks file, first adding system-config-network-tui to
> the %packages section to get networking, and the resulting ISO worked
> fine. Next I added anaconda to the %packages section. But the
> resulting ISO kernel panics saying "Unable to load SELinux Policy.
> Machine is in enforcing mode." I don't really need selinux for my
> purposes, so I changed the selinux setting in the ks file to
> --permissive, but I still get the same panic. Any ideas as to why the
> permissive setting isn't being picked up? Or what about adding anaconda
> (which admittedly adds a bunch of other packages) made it stop loading
> the policy file? Thanks.
>
> Peter
What is the current SELinux policy on the machine used to build the
LiveCD? As stated in the CentOS LiveCD documentation, "the build host
should have SELinux in permissive mode. Edit /etc/sysconfig/selinux and
restart the computer to enforce this policy."
--
SELINUX is already set to permissive, and SELINUXTYPE is set to targeted
in /etc/sysconfig/selinux. That's the first thing I checked, but it was
already set correctly.
Peter