From bac144384913df6e9f7649ed2636783f1fe1f1a6 Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Sun, 22 Sep 2024 11:55:23 +0300 Subject: [PATCH] n/essentialsoftware.md: selinux first and last aid? --- n/essentialsoftware.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/n/essentialsoftware.md b/n/essentialsoftware.md index e78351b..a16d504 100644 --- a/n/essentialsoftware.md +++ b/n/essentialsoftware.md @@ -41,6 +41,7 @@ _{{ page.excerpt }}_ - [`aminda-*.{service,socket]`](#aminda-servicesocket) - [Remember!](#remember) - [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing) + - [Recovering selinux policy issues](#recovering-selinux-policy-issues) @@ -297,3 +298,10 @@ it. anyone using either grub or systemd-bootd has probably seen the menu entry. - efibootmgr: `efibootmgr —bootnext 0000 && reboot` ([said or implied here](https://infosec.exchange/@dodgybadger/113012265751917509)) + +### Recovering selinux policy issues + +- The Fedora advice is `sudo fixfiles -B onboot`, but that didn't assist me. +- Boot with flags `enforcing=0 autorelabel` to temporarily have permissive mode + and automatic fixing. +- What actually worked was booting with `enforcing=0` and `sudo restorecon -R /`