Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove overidden functions in ipaplatform/suse #7544

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mhurron
Copy link

@mhurron mhurron commented Sep 22, 2024

Running the freeipa ansible module against openSUSE MicroOS returns the following error:

argument 'selinux_works' is of type <class 'str'> and we were unable to convert to bool: The value '' is not a valid boolean. Valid booleans include: '1', 1, 0, 'false', 'yes', 'true', 'off', 'n', 'y', 't', '0', 'no', 'on', 'f'"

Issue arises from functions in SuseTaskNamespace overriding the following functions from RedHatTaskNamespace

  • restore_context
  • check_selinux_status
  • set_selinux_booleans

Each function was simply a 'pass' resulting in an empty string being returned to 'selinux_works'

SELinux on openSUSE is configured similarly enough to Red Hat distros that these empty overrides are not needed.

Tested on MicroOS

…configuration follows Red Hat close enough
@rcritten
Copy link
Contributor

rcritten commented Oct 2, 2024

We have no way to verify that this isn't going to break other SUSE users. There is a FIXME "Implement after libexec move". Was that done? How would it have affected SELinux?

Also, can you expanding the commit message the reasoning, like you have in the PR? And add a signed-off-by?

restore_context returns nothing so pass is fine

check_selinux_status could return False and would be in line with the current set_selinux_booleans

set_selinux_booleans already returns False

Otherwise I think we'd need to validate that SUSE works in SELinux enforcing mode.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants