CBL-Mariner/SPECS/selinux-policy/booleans_targeted.conf

# enable cloud-init-growpart support
cloudinit_growpart = true

# Enable this to allow unconfined to log in over ssh
ssh_sysadm_login = true
selinux-policy: Add fix for cloud-init growpart. (#9114) Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com> 2024-05-16 23:34:27 +03:00			`# enable cloud-init-growpart support`
			`cloudinit_growpart = true`

Enable SELinux by default on all images. (#1757) * Add prototype SELinux auto configure * Add 'force_enforcing' option for SELinux * Fix setools-console tools. * Enable SELinux by default (permissive mode) on all images. Drop build system unit test as it breaks with SELinux enabled on core-efi. * selinux-policy: Update to 2.20210908. * Update to 2.20220106. Implement policy for systemd-homed and systemd-userdbd. * Fix RPM changelog date. * Finalize systemd-homed policy. * Change SELinux enablement to not affect CONFIG_LSM. * Document build settings * Update cgmanifest * Update toolkit/docs/formats/imageconfig.md Co-authored-by: Christopher Co <35273088+christopherco@users.noreply.github.com> * audit: Remove override so auditd starts by default. * Add IsValid() call for SELinux inKkernelCommandLine * Add unit test for missing selinux package * Fix debug output for selinux setfiles Co-authored-by: Daniel McIlvaney <damcilva@microsoft.com> Co-authored-by: Christopher Co <35273088+christopherco@users.noreply.github.com> 2022-02-01 16:24:41 +03:00			`# Enable this to allow unconfined to log in over ssh`
			`ssh_sysadm_login = true`