* Simplify list of required packages (and add `grubby`).
* Move Disabled -> Enforcing steps from `changing-to-enforcing-mode` to
`enabling-selinux`.
* In `changing-to-enforcing-mode`, use the correct procedure based on
whether SELinux is currently Permissive or Disabled.
* Add step for ensuring that filesystem is relabeled when re-enabling
SELinux.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
The kernel functionality that allowed to disable SELinux by changing
/etc/selinux/config is now deprecated and will be removed in F34 [1].
While setting SELINUX=Disabled will still lead to a similar state even
after the removal, it is better to guide users to disable SELinux via
kernel boot parameters, which will actually disable SELinux completely
(as in no SElinux code is executed by the kernel).
[1] https://fedoraproject.org/wiki/Changes/Remove_Support_For_SELinux_Runtime_Disable
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Use "reboot" consistently, emphasize the immediate no-prompt reboot, mention it's a console terminal, then a second reboot, and clean up step 6 language. This fixes issue #294 and I think is an improvement.
This commit refactors the content for the fonts page. I focused on
organization and layout. I restructured the previous layout from a more
command line vs. GUI approach, and instead emphasized "packaged vs.
unpackaged" fonts.
I was inspired to rework this page because I went looking for it
recently, and the search engine led me here. :-)
Signed-off-by: Justin W. Flory (he/him) <git@jwf.io>
This commit renames the "Adding new fonts in Fedora" file name. This
is done for two reasons:
1. Ensures the following changes are easier to review commit-by-commit
2. Better optimization in URL for search engines (i.e. this page is
about fonts, so using a single word in the URL optimizes for that
specific keyword)
Signed-off-by: Justin W. Flory (he/him) <git@jwf.io>
Many grammatical fixes and edits to clarify meaning. Missing portions of commands or outputs have been populated. Reformatted code snippets for aesthetic consistency.
Edited the Quick Docs landing page to be more user oriented. I moved the
existing instructions about how to contribute to its own page.
Fixes: #265
Signed-off-by: Richard Gregory <richardgrecoson@gmail.com>
Fixed some grammatical issues. About half of the content didn't copy over from the wiki, so I filled the rest in. Note: "this video" link under the subheader "What is bad about patented formats?" leads to an website which seems to have security issues. There is no SSL certificate for that link and my browser prompts me with a warning. I also removed other broken links. The suggestion to use Ogg Vorbis might be outdated, as I tried to visit the site and didn't get a response. I kept the link and content, however, because I'm not expert in this subject and have no alternative to offer.
So that users can configure their VMs appropriately and are not caught
by surprise if they encounter driver signature errors on boot.
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
The instructions included adding symlinks in the system files which we
should not suggest to end users. The Flatpak works fine, so it's much
better that users use that instead of snap.
In the future, if someone can add the snap bits without requiring any
extra system-modification commands, it can be re-added.
Removed reference to Gnome Software - extensions are now primarily installed and managed through extensions.gnome.org or the extensions-tool but not through Gnome Software anymore.
This is a personal preference, but the `fixfiles` command is a
convenient binary in Fedora that ships with SELinux to handle relabels.
It does the same thing, but note the use of the `-B` flag.
From the man pages:
> -B:
> If specified with onboot, this fixfiles will record the current date
> in the /.autorelabel file, so that it can be used later to speed up
> labeling. If used with restore, the restore will only affect files
> that were modified today.
I thought I would share this improvement upstream since I use this page
often, but I prefer this way of running more lean SELinux checks.
Signed-off-by: Justin W. Flory <git@jwf.io>
%{_bindir} etc. already starts with a slash.
There is no need to put a slash after %{buildroot}.
(Except when pointing to the literal root of the buildroot and using just "%{buildroot}/".)
