[main] Doc issue in file modules/ROOT/pages/reset-root-password.adoc #808

New issue

Closed

opened 2025-01-27 19:52:22 +00:00 by khaytsus · 2 comments

khaytsus commented

2025-01-27 19:52:22 +00:00

I think ultimately what is happening is that it is not doing an auto relabel with touch /.autorelabel and a few reboots and I don't see it do the relabel until I boot with enforcing=0 in the grub kernel parameters and then it does relabel and I can login again. So there may be a cleaner solution or way to streamline the process, but so far the simplest solution I'm seeing is adding another step that once the user has reset the password the next time they boot they need to edit grub again and pass enforcing=0 and that will do the relabeling and they can use the system again after.

A user was attempting to reset or set a root password on Fedora 40 today on IRC and found themselves entirely locked out of the system, even on user accounts. I reproduced this myself as well on two F41 test VMs. I don't know what the documentation should be updated to in order to streamline it, but #selinux on Libera told the user to boot with autorelabel=1 enforcing=0 and it fixed itself and he was able to login, and it also worked for me to fix my VMs. I think ultimately what is happening is that it is not doing an auto relabel with touch /.autorelabel and a few reboots and I don't see it do the relabel until I boot with enforcing=0 in the grub kernel parameters and then it does relabel and I can login again. So there may be a cleaner solution or way to streamline the process, but so far the simplest solution I'm seeing is adding another step that once the user has reset the password the next time they boot they need to edit grub again and pass enforcing=0 and that will do the relabeling and they can use the system again after.