oamg/leapp-repository

Upgraded system left in SELinux permissive mode

Open

#815 opened on Jan 20, 2022

View on GitHubContributor guide
 (3 comments) (0 reactions) (0 assignees)Python (171 forks)auto 404
good first issue

Repository metrics

Stars
 (63 stars)
PR merge metrics
 (PR metrics pending)

Description

Actual behavior An EL7 system that was in SELinux enforcing mode before the upgrade is left in permissive mode after the upgrade is complete.

To Reproduce Steps to reproduce the behavior

  1. Set SELinux enforcing mode on an EL7 system
  2. leapp upgrade it
  3. After rebooted run sestatus and notice the system is in permissive mode

Expected behavior A system that starts in enforcing mode ought be returned to enforcing mode when the upgrade is done

System information (please complete the following information):

  • OS and version: CentOS 7.9
  • Linux server.interlinx.bc.ca 3.10.0-1160.49.1.el7.x86_64 #1 SMP Tue Nov 30 15:51:32 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
  • leapp-0.12.1-100.20210924142320684911.master.28.g1f03432.el7.noarch leapp-upgrade-el7toel8-deps-0.14.0-100.202109271224Z.b7ebfca.master.el7.elevate.noarch leapp-upgrade-el7toel8-0.14.0-100.202109271224Z.b7ebfca.master.el7.elevate.noarch leapp-deps-0.12.1-100.20210924142320684911.master.28.g1f03432.el7.noarch python2-leapp-0.12.1-100.20210924142320684911.master.28.g1f03432.el7.noarch leapp-data-almalinux-0.1-2.el7.noarch

Contributor guide

Research direction
Examine the leapp upgrade workflow for SELinux configuration persistence. Check whether the upgrade process explicitly sets SELinux to enforcing mode after reboot or if it relies on system defaults. Look for any actor that modifies /etc/selinux/config or runs setenforce.
Tech stack
pythonshell
Domain
backendinfrastructure
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
SELinuxLinux system administration
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60