Ask Your Question
1

Why did selinux reset on system upgrade?

asked 2015-11-23 07:36:53 -0600

dcrdev gravatar image

updated 2015-11-23 17:53:35 -0600

mether gravatar image

I recently upgraded my F22 server to F23 using the dnf upgrade tool - all went well except for selinux. I had previously set a number of selinux options (boolean values) to allow my server configuration to operate. After upgrading these had to be set again, which was inconvenient to say the least.

My question is, is this supposed to happen and if so why? I'm not looking for answers that tell me to disable selinux, I'm just trying to get to the root of the (potential) problem.

I'm not really clear on how selinux stores it's configuration, but I did a search for .rpmsave files to see whether the configuration had been somehow replaced and found nothing in relation to selinux.

Thanks

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
3

answered 2015-11-23 08:03:27 -0600

When you upgrade, selinux policy is upgraded as well. Considering the complexity of selinux policy, my guess is that it is easier and more reliable to start with a clean slate rather than trying to preserve any booleans or other selinux customizations.

Upgrades will also reset confined users for example.

If you want a better answer, consider filing a bug report or asking on IRC , #fedora-selinux

https://fedoraproject.org/wiki/How_to...

See also - https://docs.fedoraproject.org/en-US/...

edit flag offensive delete link more

Question Tools

1 follower

Stats

Asked: 2015-11-23 07:36:53 -0600

Seen: 119 times

Last updated: Nov 23 '15