15.3 PRC: SE Linux Policy loading failed

[Stefan Weiberg]

Hi Bernd,

Thank you for your report.

> On 16. May 2021, at 12:53, Thorsten Kukuk <kukuk at suse.de> wrote:
> 
> 
> Hi,
> 
> On Sat, May 15, Bernd wrote:
> 
>> Hello,
>> 
>> I just installed 15.3 PRC in a Hyper-V VM (UEFI with secure boot) to do some
>> qualification testing. I used the Full ISO and installed SLES with only the
>> base system module in minimal configuration and no registration. In the
>> installer I enabled SELinux in advisory mode.
> 
> I assume you mean SLES 15 SP3 and not Leap 15.3?
> It's really helpful to use correct product and version names, own created
> version numbers only lead to confusion and wrong advice.
> 
> In short: as documented since a long time, SLES does not come with a
> SELinux policy, you need to bring your own with you.
> I don't know why this option is visible in YaST, as only SLE Micro comes
> with full SELinux support.

This is actually a bug, which has been fixed after the PublicRC release. This functionality was implemented to enable SELinux configuration via autoYaST in SUSE Linux Enterprise Server and offer a visual configuration option in the installer for products that have a default SUSE SELinux policy available. For now this only applies to SUSE Linux Enterprise Micro and therefore the option has been switched to not be visible in the installer of SUSE Linux Enterprise Server. If a SELinux policy is provided by the user it can still be configured via autoYaST though.

Best regards,
Stefan
--
Stefan Weiberg
SLE Releasemanager

SUSE Software Solutions Germany GmbH
Maxfeldstr. 5
D-90409 Nürnberg

T +49-(0)911-740 53 0
M +49-(0)173-587 6848
E <sweiberg at suse.com>

https://www.suse.com/

(HRB 36809, AG Nürnberg)
Geschäftsführer: Felix Imendörffer

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.suse.com/pipermail/sle-beta/attachments/20210517/b2eb27fb/attachment.asc>