Foreman » Packaging

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=2106268

Description of problem:
After an upgrade of a Satellite with Leapp from EL7 to EL8, the new system is lacking the Selinux port labels, rendering the application unusable once the user tries to enable SELinux enforcing.

The workaround is to re-install the foreman-selinux and katello-selinux packages, as this will trigger re-adding the ports.

However, the reason the ports are not added during initial upgrade is that the %post scripts of the packages check if SELinux is enabled before doing any action -- and it is disabled during Leapp.

Other packages (candlepin-selinux, pulpcore-selinux) don't have this limitation and do not require re-installation.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:

Expected results:

Additional info: