In recent Rawhide composes, it seems that anaconda is adding "selinux=0" to the GRUB_CMDLINE_LINUX line in /etc/default/grub on live installs, so it reads:
GRUB_CMDLINUX_LINUX="rhgb quiet selinux=0"
this obviously results in the system having SELinux disabled, which is definitely not what we want.
This only seems to happen on live installs (at least, on a quick check - the openQA base_selinux test is failing on live image installs, but passing on the server DVD install and the Silverblue dvd_ostree install). I'm not sure what changed exactly, yet.
This is a violation of Basic release criterion "Unless explicitly specified otherwise, after system installation SELinux must be enabled and in enforcing mode" - https://fedoraproject.org/wiki/Basic_Release_Criteria#selinux-configuration - so proposing as a Beta blocker.
https://github.com/rhinstaller/anaconda/commit/b11de43acca8ccca410557ac7513e99076d94234 inadvertently flipped the logic of a check in liveinst that's supposed to add `--noselinux` to the anaconda command line if SELinux is disabled; now it adds `--noselinux` if it's enabled. https://github.com/rhinstaller/anaconda/pull/3779 should fix it.
PR merged, waiting for release.
This is confirmed fixed, the openQA test passes in current composes.