ansible.posix/changelogs/fragments
Ondrej Mosnacek 53d47e1763 selinux: update kernel boot params when disabling/re-enabling SELinux
The ability to disable SELinux from userspace based on the configuration
file is being deprecated in favor of the selinux=0 kernel boot
parameter. (Note that this affects only the "full" disable; switching
to/from permissive mode will work the same as before.)

Therefore, add an 'update_kernel_param' module parameter that will cause
it to set/unset the kernel command-line parameter using grubby when
enabling/disabling SELinux. (An explicit parameter was chosen for
backwards compatibility.)

More information:
https://lore.kernel.org/selinux/157836784986.560897.13893922675143903084.stgit@chester/
https://fedoraproject.org/wiki/Changes/Remove_Support_For_SELinux_Runtime_Disable

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2021-09-20 10:09:54 +05:30
..
.keep Prepare 1.1.1 release 2020-09-02 20:55:04 +00:00
247_firewalld.yml firewalld: Correct usage of queryForwardPort 2021-08-16 14:12:22 +05:30
254_variable_warnings.yml Display warning message if wrong parameter set to masquerade or icmp-block-inversion 2021-09-06 09:14:34 +09:00
255_authorized_key_url.yml Update changelogs 2021-09-08 11:39:17 +05:30
disable_selinux_via_kernel_cmdline.yml selinux: update kernel boot params when disabling/re-enabling SELinux 2021-09-20 10:09:54 +05:30
sanity_fixes.yml sanity fixes for pylint test 2021-08-16 16:04:29 +05:30