From b1f0cfb0830593b6dfcb2035f872d3eb04d3d695 Mon Sep 17 00:00:00 2001 From: Lubos Kocman Date: Thu, 13 Feb 2025 12:21:10 +0100 Subject: [PATCH] Change the default lsm to SELinux for both Leap and Tumblweed jsc#PED-12021 --- products.d/agama-products.changes | 7 +++++++ products.d/leap_160.yaml | 2 +- products.d/tumbleweed.yaml | 4 ++-- 3 files changed, 10 insertions(+), 3 deletions(-) diff --git a/products.d/agama-products.changes b/products.d/agama-products.changes index ff8fe5409e..e155556987 100644 --- a/products.d/agama-products.changes +++ b/products.d/agama-products.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Feb 13 11:19:19 UTC 2025 - Lubos Kocman + +- Change the default lsm to SELinux in enforcing for both Leap and Tumblweed + keep AppArmor around as an option jsc#PED-12021 + https://news.opensuse.org/2025/02/13/tw-plans-to-adopt-selinux-as-default/ + ------------------------------------------------------------------- Fri Jan 24 06:45:45 UTC 2025 - Imobach Gonzalez Sosa diff --git a/products.d/leap_160.yaml b/products.d/leap_160.yaml index 0c9563becc..dc8e84aa7b 100644 --- a/products.d/leap_160.yaml +++ b/products.d/leap_160.yaml @@ -59,7 +59,7 @@ software: base_product: openSUSE security: - lsm: apparmor + lsm: selinux available_lsms: apparmor: patterns: diff --git a/products.d/tumbleweed.yaml b/products.d/tumbleweed.yaml index f0ed0a7cf9..548123dbd2 100644 --- a/products.d/tumbleweed.yaml +++ b/products.d/tumbleweed.yaml @@ -116,7 +116,7 @@ software: base_product: openSUSE security: - lsm: apparmor + lsm: selinux available_lsms: apparmor: patterns: @@ -124,7 +124,7 @@ security: selinux: patterns: - selinux - policy: permissive + policy: enforcing none: patterns: null