From: David Galloway <dgallowa@redhat.com>
Date: Tue, 20 Nov 2018 18:47:57 +0000 (-0500)
Subject: cobbler: Set SELinux = enforcing by default
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fheads%2Fwip-enforcing;p=ceph-cm-ansible.git

cobbler: Set SELinux = enforcing by default

Requested by downstream QE.  This shouldn't be an issue since only
downstream QE needs SELinux in Enforcing mode.  They don't use
ceph-cm-ansible which sets it to Permissive in the testnodes role.

Fixes: http://tracker.ceph.com/issues/37338

Signed-off-by: David Galloway <dgallowa@redhat.com>
---

diff --git a/roles/cobbler/templates/kickstarts/cephlab_rhel.ks b/roles/cobbler/templates/kickstarts/cephlab_rhel.ks
index 03f8b0ff..2c6ff565 100644
--- a/roles/cobbler/templates/kickstarts/cephlab_rhel.ks
+++ b/roles/cobbler/templates/kickstarts/cephlab_rhel.ks
@@ -29,7 +29,7 @@ reboot
 #Root password
 rootpw --iscrypted $default_password_crypted
 # SELinux configuration
-selinux --permissive
+selinux --enforcing
 # Do not configure the X Window System
 skipx
 # System timezone
diff --git a/roles/cobbler/templates/kickstarts/cephlab_rhel_sdm.ks b/roles/cobbler/templates/kickstarts/cephlab_rhel_sdm.ks
index 3e4c4342..8a7de9a8 100644
--- a/roles/cobbler/templates/kickstarts/cephlab_rhel_sdm.ks
+++ b/roles/cobbler/templates/kickstarts/cephlab_rhel_sdm.ks
@@ -43,7 +43,7 @@ reboot
 #Root password
 rootpw --iscrypted $default_password_crypted
 # SELinux configuration
-selinux --permissive
+selinux --enforcing
 # Do not configure the X Window System
 skipx
 # System timezone