From 81a7b2ae6d0b542d3c5493bda0d7c107dc46bc64 Mon Sep 17 00:00:00 2001
From: Daniel Drake <dsd@laptop.org>
Date: Thu, 07 Jun 2012 00:37:33 +0000
Subject: base: detect and disable SELinux (#11854)

SELinux doesn't seem to play nice with image builds any more.
The anaconda builder faces the same issue and requires it to be
disabled as a result.

Disable SELinux if it is detected and enforcing.
---
diff --git a/modules/base/prepare.05.selinux.sh b/modules/base/prepare.05.selinux.sh
new file mode 100644
index 0000000..a49a037
--- /dev/null
+++ b/modules/base/prepare.05.selinux.sh
@@ -0,0 +1,25 @@
+# Copyright (C) 2012 One Laptop Per Child
+# Licensed under the terms of the GNU GPL v2 or later; see COPYING for details.
+#
+# SELinux causes problems when enabled, e.g. rpm %post scripts fail inside the
+# install root.
+# http://thread.gmane.org/gmane.linux.redhat.fedora.livecd/4922
+#
+# If it is enforcing, set it into permissive mode. Anaconda does similarly:
+# https://www.redhat.com/archives/anaconda-devel-list/2012-May/msg00315.html 
+
+[ -x /usr/sbin/getenforce ] || exit 0
+
+mode=$(getenforce)
+[ "$mode" = "Enforcing" ] || exit 0
+
+setenforce 0
+echo
+echo "SELinux was found enabled on your system, in enforcing mode."
+echo "SELinux is incompatible with olpc-os-builder."
+echo
+echo "It has been temporarily set to permissive mode to avoid this incompatibility."
+echo "It will be re-enabled upon reboot, or alternatively you can re-enable "
+echo "it yourself, after olpc-os-builder has completed."
+echo
+sleep 5
--
cgit v0.9.1