n/essentialsoftware.md: selinux first and last aid?

.pre-commit-config.yaml

@@ -16,7 +16,7 @@ ci:
 default_language_version:
   node: "lts"
   # Remember .python-version !
-  python: "3.12"
+  python: "3.13"
   ruby: ".ruby-version"
 
 repos:

.python-version

@@ -1 +1 @@
-3.12.6
+system

Gemfile.lock

@@ -36,22 +36,22 @@ GEM
     ffi (1.17.0-x86_64-linux-gnu)
     ffi (1.17.0-x86_64-linux-musl)
     forwardable-extended (2.6.0)
-    google-protobuf (4.28.0)
+    google-protobuf (4.28.2)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.0-aarch64-linux)
+    google-protobuf (4.28.2-aarch64-linux)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.0-arm64-darwin)
+    google-protobuf (4.28.2-arm64-darwin)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.0-x86-linux)
+    google-protobuf (4.28.2-x86-linux)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.0-x86_64-darwin)
+    google-protobuf (4.28.2-x86_64-darwin)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.0-x86_64-linux)
+    google-protobuf (4.28.2-x86_64-linux)
       bigdecimal
       rake (>= 13)
     haml (6.3.0)
@@ -62,9 +62,9 @@ GEM
       activesupport (>= 2)
       nokogiri (>= 1.4)
     http_parser.rb (0.8.0)
-    i18n (1.14.5)
+    i18n (1.14.6)
       concurrent-ruby (~> 1.0)
-    jekyll (4.3.3)
+    jekyll (4.3.4)
       addressable (~> 2.4)
       colorator (~> 1.0)
       em-websocket (~> 0.5)
@@ -138,52 +138,52 @@ GEM
     rbs (3.5.3)
       logger
     rexml (3.3.7)
-    rouge (4.3.0)
+    rouge (4.4.0)
     safe_yaml (1.0.5)
-    sass-embedded (1.78.0)
+    sass-embedded (1.79.3)
       google-protobuf (~> 4.27)
       rake (>= 13)
-    sass-embedded (1.78.0-aarch64-linux-android)
+    sass-embedded (1.79.3-aarch64-linux-android)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-aarch64-linux-gnu)
+    sass-embedded (1.79.3-aarch64-linux-gnu)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-aarch64-linux-musl)
+    sass-embedded (1.79.3-aarch64-linux-musl)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-aarch64-mingw-ucrt)
+    sass-embedded (1.79.3-aarch64-mingw-ucrt)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-arm-linux-androideabi)
+    sass-embedded (1.79.3-arm-linux-androideabi)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-arm-linux-gnueabihf)
+    sass-embedded (1.79.3-arm-linux-gnueabihf)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-arm-linux-musleabihf)
+    sass-embedded (1.79.3-arm-linux-musleabihf)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-arm64-darwin)
+    sass-embedded (1.79.3-arm64-darwin)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-riscv64-linux-android)
+    sass-embedded (1.79.3-riscv64-linux-android)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-riscv64-linux-gnu)
+    sass-embedded (1.79.3-riscv64-linux-gnu)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-riscv64-linux-musl)
+    sass-embedded (1.79.3-riscv64-linux-musl)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86-cygwin)
+    sass-embedded (1.79.3-x86-cygwin)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86-linux-android)
+    sass-embedded (1.79.3-x86-linux-android)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86-linux-gnu)
+    sass-embedded (1.79.3-x86-linux-gnu)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86-linux-musl)
+    sass-embedded (1.79.3-x86-linux-musl)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86-mingw-ucrt)
+    sass-embedded (1.79.3-x86-mingw-ucrt)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86_64-cygwin)
+    sass-embedded (1.79.3-x86_64-cygwin)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86_64-darwin)
+    sass-embedded (1.79.3-x86_64-darwin)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86_64-linux-android)
+    sass-embedded (1.79.3-x86_64-linux-android)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86_64-linux-gnu)
+    sass-embedded (1.79.3-x86_64-linux-gnu)
       google-protobuf (~> 4.27)
-    sass-embedded (1.78.0-x86_64-linux-musl)
+    sass-embedded (1.79.3-x86_64-linux-musl)
       google-protobuf (~> 4.27)
     securerandom (0.3.1)
     syntax_tree (6.2.0)
@@ -203,7 +203,7 @@ GEM
     tilt (2.4.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.5.0)
+    unicode-display_width (2.6.0)
     webrick (1.8.1)
 
 PLATFORMS

n/essentialsoftware.md

@@ -41,6 +41,7 @@ _{{ page.excerpt }}_
   - [`aminda-*.{service,socket]`](#aminda-servicesocket)
 - [Remember!](#remember)
   - [Accessing UEFI setup without key smashing](#accessing-uefi-setup-without-key-smashing)
+  - [Recovering selinux policy issues](#recovering-selinux-policy-issues)
 
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
 
@@ -297,3 +298,10 @@ it.
   anyone using either grub or systemd-bootd has probably seen the menu entry.
 - efibootmgr: `efibootmgr —bootnext 0000 && reboot`
   ([said or implied here](https://infosec.exchange/@dodgybadger/113012265751917509))
+
+### Recovering selinux policy issues
+
+- The Fedora advice is `sudo fixfiles -B onboot`, but that didn't assist me.
+- Boot with flags `enforcing=0 autorelabel` to temporarily have permissive mode
+  and automatic fixing.
+- What actually worked was booting with `enforcing=0` and `sudo restorecon -R /`

package.json

@@ -2,6 +2,6 @@
 	"devDependencies": {
 		"@aminda/global-prettier-config": "2024.28.4"
 	},
-	"packageManager": "pnpm@9.10.0+sha512.73a29afa36a0d092ece5271de5177ecbf8318d454ecd701343131b8ebc0c1a91c487da46ab77c8e596d6acf1461e3594ced4becedf8921b074fbd8653ed7051c",
+	"packageManager": "pnpm@9.11.0+sha512.0a203ffaed5a3f63242cd064c8fb5892366c103e328079318f78062f24ea8c9d50bc6a47aa3567cabefd824d170e78fa2745ed1f16b132e16436146b7688f19b",
 	"prettier": "@aminda/global-prettier-config"
 }