diff options
| author | Daniel Drake <dsd@laptop.org> | 2012-06-07 00:37:33 (GMT) |
|---|---|---|
| committer | Daniel Drake <dsd@laptop.org> | 2012-06-07 00:37:33 (GMT) |
| commit | 81a7b2ae6d0b542d3c5493bda0d7c107dc46bc64 (patch) | |
| tree | c8d3781c40838a303c7f5eb706385f6854b9a85a | |
| parent | a9b4e062c9cbe809b26d97264068a6bc5c2e2824 (diff) | |
base: detect and disable SELinux (#11854)
SELinux doesn't seem to play nice with image builds any more.
The anaconda builder faces the same issue and requires it to be
disabled as a result.
Disable SELinux if it is detected and enforcing.
| -rw-r--r-- | modules/base/prepare.05.selinux.sh | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/modules/base/prepare.05.selinux.sh b/modules/base/prepare.05.selinux.sh new file mode 100644 index 0000000..a49a037 --- /dev/null +++ b/modules/base/prepare.05.selinux.sh @@ -0,0 +1,25 @@ +# Copyright (C) 2012 One Laptop Per Child +# Licensed under the terms of the GNU GPL v2 or later; see COPYING for details. +# +# SELinux causes problems when enabled, e.g. rpm %post scripts fail inside the +# install root. +# http://thread.gmane.org/gmane.linux.redhat.fedora.livecd/4922 +# +# If it is enforcing, set it into permissive mode. Anaconda does similarly: +# https://www.redhat.com/archives/anaconda-devel-list/2012-May/msg00315.html + +[ -x /usr/sbin/getenforce ] || exit 0 + +mode=$(getenforce) +[ "$mode" = "Enforcing" ] || exit 0 + +setenforce 0 +echo +echo "SELinux was found enabled on your system, in enforcing mode." +echo "SELinux is incompatible with olpc-os-builder." +echo +echo "It has been temporarily set to permissive mode to avoid this incompatibility." +echo "It will be re-enabled upon reboot, or alternatively you can re-enable " +echo "it yourself, after olpc-os-builder has completed." +echo +sleep 5 |