Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions DC-SAP-SELinux
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
# This file originates from the project https://github.com/openSUSE/doc-kit
# This file can be edited downstream.

MAIN="SELinux.asm.xml"
# Point to the ID of the <structure> of your assembly
SRC_DIR="articles"
IMG_SRC_DIR="images"

PROFOS="sles4sap"
PROFCONDITION="16.0"
#PROFCONDITION="suse-product;beta"
#PROFCONDITION="community-project"

STYLEROOT="/usr/share/xml/docbook/stylesheet/suse2022-ns"
FALLBACK_STYLEROOT="/usr/share/xml/docbook/stylesheet/suse-ns"
8 changes: 3 additions & 5 deletions concepts/selinux-modes.xml
Original file line number Diff line number Diff line change
Expand Up @@ -20,11 +20,9 @@
<!-- can be changed via merge in the assembly -->
<!--add author's email address-->
<meta name="maintainer" content="[email protected]" its:translate="no"/>

</info>
<para>
&selnx; can run in <literal>enforcing</literal> or <literal>permissive</literal> mode:

</para>
<variablelist>
<varlistentry>
Expand All @@ -42,9 +40,9 @@
</listitem>
</varlistentry>
</variablelist>
<para>The default in &productnameshort; &productnumber; is <literal>enforcing</literal> mode.</para>
<para>
For information about switching between &selnx; modes, refer to
<para><phrase os="sles">The default in &productnameshort; &productnumber; 16 is <literal>enforcing</literal> mode.</phrase></para>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<para><phrase os="sles">The default in &productnameshort; &productnumber; 16 is <literal>enforcing</literal> mode.</phrase></para>
<para os="sles">The default in &productnameshort; &productnumber; is <literal>enforcing</literal> mode.</para>

<para><phrase os="sles4sap">The default in &sles4sap; 16 is enabled in <literal>permissive</literal> mode, if &sap; patterns are installed.</phrase></para>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<para><phrase os="sles4sap">The default in &sles4sap; 16 is enabled in <literal>permissive</literal> mode, if &sap; patterns are installed.</phrase></para>
<para os="sles4sap">The default in &productname; &productnemuber; is enabled in <literal>permissive</literal> mode, if &sap; patterns are installed.</para>

<para> For information about switching between &selnx; modes, refer to
<xref linkend="selinux-switching-modes"/>.
</para>
</topic>
8 changes: 7 additions & 1 deletion tasks/selinux-packages.xml
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,15 @@
easier. This includes tools such as <command>audit2allow</command> and
<command>semanage</command>. If the package is missing, run the following command to install it:
</para>
<screen os="sles;sles4sap">
<screen os="sles;sles4sap">
&prompt.sudo;<command>zypper install policycoreutils-python-utils</command>
</screen>
<para><phrase os="sles4sap">
The<literal>selinux-policy-sapenablement</literal> package is for &selnx; policy changes for running &sap;.
Currently it sets the settings that are needed, but still sets &selnx; to <literal>permissive</literal> mode.
Users can set it to <literal>enforcing</literal> mode again to use the base policy module &suse; provides.
This package is installed by default.
</phrase></para>
<screen os="slmicro">&prompt.sudo;<command>transactional-update pkg install policycoreutils-python-utils</command></screen>
<para os="sles;sles4sap">
The &selnx; man pages contain comprehensive documentation on the options
Expand Down