aii-ks issue : "access denied" from ssh or console access after post install (centos7)

[pugnere]

Using templates 18.6.0 : when selinux is enabled, I can't access a freshly installed system (Centos 7.6) after the post-install.

The only way to recover access is to force the system to relabel files (touch /.autorelabel) from a recover procedure like this one : https://unix.stackexchange.com/questions/392953/access-denied-for-all-users-after-reset-of-root-password

Modified the /usr/lib/perl/NCM/Component/ks.pm file of aii-ks to add the "touch /.autorelabel" just before the "shutdown -r now".

[stdweird]

@pugnere do you have any idea what file causes the issue? afaik, aii-ks does not do anything special, so this must be something in a component.

[Pansanel]

This issue is caused by SELINUX. SELINUX is disabled during installation and enabled after (on CentOS7). To mitigate this issue, we are using SELINUX in permissive mode at IPHC:

variable AII_OSINSTALL_SELINUX = "permissive";

This issue is related to:
#293

[pugnere]

@stdweird, I think this is a selinux-policy* and kernel issue after rpm upgrades, may be related to https://bugzilla.redhat.com/show_bug.cgi?id=1581551