OpenSUSE Leap 16.0 is going to have SELinux policies

Discussion in 'all things UNIX' started by reasonablePrivacy, Mar 30, 2025.

  1. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,241
    Location:
    Member state of European Union
    In February I come across this news:
    OpenSUSE Tumbleweed Switching From AppArmor To SELinux For New Installations
    https://www.phoronix.com/news/OpenSUSE-Tumble-Goes-SELinux
    Since I usually don't use rolling release distros, it wasn't immediately relevant to me.
    I only wondered if Leap will follow the path. I searched for it today and it seems it will, or at least will have exact support level for SELinux:
    What’s new in Leap 16.0?
    https://www.gnuhealth.org/ghcon/2024/presentations/GHCon2024-Doug-Demaio-Moving-forward-with-leap-16.pdf

    OpenSUSE Leap 16.0 is scheduled to reach beta in May
     
  2. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    2,241
    Location:
    Member state of European Union
    I was playing with new OpenSUSE Leap 16.0 Beta in VM. I see that SELinux is enabled in enforcing mode by default. It is also already stated as one of Major changes in this article
    SDB:System upgrade to Leap 16.0
    https://en.opensuse.org/SDB:System_upgrade_to_Leap_16.0#Major_changes
    Given that I like to mess with default filesystem choices and partition layout to customize it to my liking and I don't know that much about SELinux I already encountered some problem when recreating /home on another filesystem.
    I eventually figured out it was SELinux, though I didn't wanted to disable MAC system. I found this article with concise explanation and better way of copying to avoid facing problems with no proper SELinux context on /home in new filesystem again.
    https://www.dontpanicblog.co.uk/2024/04/30/move-home-on-selinux-systems/

    ---
    I plan to learn and use SELinux. However if anybody do not want to switch to it, here is an article about switching (back) to AppArmor
    How to switch from SELinux to AppArmor in Leap 16
    https://en.opensuse.org/How_to_switch_from_SELinux_to_AppArmor_in_Leap_16
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.