Skip to content

Conversation

@teclator
Copy link
Contributor

@teclator teclator commented Jul 7, 2025

Problem

Currently Selinux is selected based on the product LSM definition but although it is possible to deselect it from the Software selection when installing some product it is always installed at the end of the installation.

Solution

When starting the installation the patterns of the default LSM defined in the product definition will be selected like as them were selected by the user allowing to deselect them and to select other LSM patterns if wanted so.

At the end of the installation the selected LSM will be based on the software selection having the default one precedence over the other candidates. The first one which patterns are included in the Software proposal will be configured.

Tests

  • Tested manually
  • Added unit test.

@coveralls
Copy link

coveralls commented Jul 8, 2025

Coverage Status

coverage: 64.281% (-0.003%) from 64.284%
when pulling adb595c on lsm_select
into 1b40836 on master.

@teclator teclator marked this pull request as ready for review July 9, 2025 08:35
@teclator teclator changed the title Do not set the LSM resolvables but use the software selection Allow to deselect the product defined LSM from the Software selection (bsc#1244431) Jul 9, 2025
@teclator teclator merged commit 0197b65 into master Jul 9, 2025
15 checks passed
@teclator teclator deleted the lsm_select branch July 9, 2025 13:11
imobachgs added a commit that referenced this pull request Jul 15, 2025
…2560)

## Problem

We have been reported that using auto-installation Agama does not honor
the list of patterns included in the profile. This behavior is related
to the recent feature we introduced to disable SELinux (see #2540).

## Solution

Change the approach to select the default LSM only after selecting the
product instead of during the "probing" phase.

## Testing

- Added a new unit test
- Tested manually

## Pre-selecting patterns

This PR introduces a mechanism to determine whether a user pattern
should be enabled by default:

```yaml
user_patterns:
  - cockpit
  - name: selinux
    selected: true
  - fips
  - documentation
```
@imobachgs imobachgs mentioned this pull request Jul 21, 2025
imobachgs added a commit that referenced this pull request Jul 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants