我无法在 AlmaLinux 8.7 的全新映像安装上启用 SELinux。
重启后:
[root@cs46949 stdusr]# cat /etc/redhat-release &&
> uptime &&
> dnf -y install policycoreutils selinux-policy selinux-policy-targeted libselinux-utils setroubleshoot-server setools setools-console &&
> dnf update &&
> cat /etc/selinux/config &&
> sestatus
AlmaLinux release 8.7 (Stone Smilodon)
10:03:08 up 0 min, 1 user, load average: 0.27, 0.08, 0.03
Last metadata expiration check: 0:18:10 ago on Sat Dec 24 09:46:52 2022.
Package policycoreutils-2.9-20.el8.x86_64 is already installed.
Package selinux-policy-3.14.3-108.el8.noarch is already installed.
Package selinux-policy-targeted-3.14.3-108.el8.noarch is already installed.
Package libselinux-utils-2.9-6.el8.x86_64 is already installed.
Package setroubleshoot-server-3.3.26-5.el8.x86_64 is already installed.
Package setools-4.3.0-3.el8.x86_64 is already installed.
Package setools-console-4.3.0-3.el8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
Last metadata expiration check: 0:18:12 ago on Sat Dec 24 09:46:52 2022.
Dependencies resolved.
Nothing to do.
Complete!
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these three values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted
SELinux status: disabled
备注:这是同一个问题SELINUX 不会启用,但那个已经关闭并且偏离主题(因为用户在 linode 上使用 linode 提供的(自定义)内核,但不支持 SELinux)。 AlmaLinux 具有 RHEL 二进制兼容内核版本。 4.18.0
答案1
该AlmaLinux 实例由dogado.de 提供,并作为Paralles Virtuozzo 下的虚拟机运行。根据他们的文档,它不支持 SELinux。