Re: SELinux disabled after installation through Kickstart

[Thomas Cameron]

On 9/17/19 1:41 PM, Jose Vicente Nunez wrote:
>  Hello all,
>
>  I did a installation through Kickstart and installed a custom kernel; On my kickstart
> file I explicitly told kickstart to warn about violations but not to enforce:
>
>  selinux --permissive
>
>  However after the system comes up I can see than SELinux is completely disabled:
>
>  [root@X ~]# getenforce
>  Disabled
>
>  My /etc/selinux/config seems to have the right settings:
>
>  SELINUX=permissive
>  SELINUXTYPE=targeted
>
>  Any pointers where I can look up for issues?
>  Could be my custom kernel who is causing this issue?
>
>  I'm learning the ropes with SELinux so any help will be greatly appreciated.
>
>  Thanks.
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]... 
It's probably either 1) your custom kernel - you didn't compile selinux 
support in, or 2) your kickstart is so stripped down that you don't have 
what you need for selinux to work.

I'm leaning towards 1.

Thomas