I wanted to learn about SELinux and tried enabling it on a fedora-33 standalone qube, “fedora-SELinux-test”.
sudo nano /etc/selinux/config
, but the file didn’t exist. I did a
sudo dnf whatprovides /etc/selinux/config
, which prompted me to
sudo dnf install selinux-policy.
Then I tried adding
SELinux= in the file and then
getenforce told me
setenforce 1 told me
setenforce: SELinux is disabled.
I then did
sudo dnf whatprovides sestatus
sudo dnf install policycoreutils-py*
, but that didn’t help. I rebooted each time I made a change. I tried to make the qube HVM as well in case there was a problem with kernel and XEN interacting, but I don’t know how that works.
The “Managing qube kernels” documentation says the kernels are provided by dom0 and I shouldn’t modify kernel options within the qube. OK, so in dom0 I did
and for kernelopts I only see "nopat’. I couldn’t find what kernelopts to add for SELinux support or even that’s the way I should proceed.
I don’t know much about SELinux so I can’t troubleshoot the problem myself. I searched for similar problems, but there was nothing qubes-related or anything else that helped me.
Has anyone successfully enabled SELinux in Qubes? How? If it’s even possible, how should I proceed? I feel like I’m missing some critical information without which I can’t proceed.