Basis for selinux set to disabled

[ronlipke]

What is the basis for setting selinux to disabled in this cookbook? I see it changed from permissive sometime between version 1.2.0 and 1.3.0.
We have some compliance restrictions that require selinux and was surprised to see it outright disabled here.
Thanks!

[mrmichaeladavis]

+1

[agperson]

But why is this cookbook managing SELinux? I'm confused as to why it is in this purview at all.

[mrmichaeladavis]

I agree with @agperson. As a security professional, having no documentation of this change and adding it to the run list could dramatically impact my security. SELinux should be managed be a separate wrapper cookbook.

[johnbellone]

@mdavis7771 It is a long story, but ultimately it is a relic from an incorrect generation of this cookbook about a year ago. I do not have a problem removing this cookbook touching SELinux at all.

[johnbellone]

I'll accept a PR here if either @mdavis7771 or @agperson is willing to do so. We'll need to increment the minor release.

[mrmichaeladavis]

@johnbellone, Understood, I'll do a PR later this week.

[Ginja]

#256 should fulfill this.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.