Bug 2290685

Summary:	during FFU to OSP 17.1 selinux turn on permissive at computes after their leapp upgrade step
Product:	Red Hat OpenStack	Reporter:	alisci <alisci>
Component:	openstack-tripleo-heat-templates	Assignee:	Juan Badia Payno <jbadiapa>
Status:	CLOSED ERRATA	QA Contact:	Archana Singh <arcsingh>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	17.1 (Wallaby)	CC:	jbadiapa, jpretori, lbezdick, mariel, mburns, ralfieri
Target Milestone:	z4	Keywords:	Triaged
Target Release:	17.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-tripleo-heat-templates-14.3.1-17.1.20240919130751.e7c7ce3.el9ost	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-11-21 09:30:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description alisci 2024-06-06 08:54:31 UTC

Description of problem:
during FFU to OSP 17.1 selinux at computes turns to "permissive" instead of "enforcing"

Version-Release number of selected component (if applicable):
OSP 17.1

How reproducible:
during FFU to 17.1 at computes leapp upgrade step [1] you have the leapp upgraded nodes with selinux set on "permissive" instead of "enforcing"


Actual results:
selinux turns on "permissive"

Expected results:
selinux should be set on "enforcing"

Comment 14 errata-xmlrpc 2024-11-21 09:30:29 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHOSP 17.1.4 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2024:9978