mkosi: Remove enforcing=0 from default kernel command line

We already have selinux=0 in the default kernel command line so
enforcing=0 is redundant. Instead, pass in enforcing=0 when we
enable selinux in TEST-06-SELINUX.
This commit is contained in:
Daan De Meyer 2024-07-17 18:56:02 +02:00
parent 5319be5f0c
commit f5c44df929
2 changed files with 1 additions and 2 deletions

View File

@ -68,7 +68,6 @@ KernelCommandLine=systemd.crash_shell
systemd.default_device_timeout_sec=30
# Make sure no LSMs are enabled by default.
selinux=0
enforcing=0
systemd.early_core_pattern=/core
systemd.firstboot=no
raid=noautodetect

View File

@ -3,7 +3,7 @@
integration_tests += [
integration_test_template + {
'name' : fs.name(meson.current_source_dir()),
'cmdline' : integration_test_template['cmdline'] + ['selinux=1', 'lsm=selinux'],
'cmdline' : integration_test_template['cmdline'] + ['selinux=1', 'enforcing=0', 'lsm=selinux'],
# FIXME; Figure out why reboot sometimes hangs with 'linux' firmware.
# Use 'auto' to automatically fallback on non-uefi architectures.
'firmware' : 'auto',