On 2/12/25 11:04 AM, Cathy Hu wrote:
> Hi all,
>
> We would like to announce that with the next openSUSE Tumbleweed
> snapshot 20250211 the default mandatory access control (MAC) system
> selected by the installer will be switched from AppArmor to SELinux in
> enforcing mode. Additionally, the openSUSE Tumbleweed minimalVM will be
> shipped with SELinux in enforcing mode.
>
> Users installing openSUSE Tumbleweed via the ISO image will see SELinux
> in enforcing mode as default option in the installer. If the user
> prefers to use AppArmor instead of SELinux, they are able to change the
> selection to AppArmor manually in the installer. AppArmor continues to
> be excellently maintained by Christian Boltz (@cboltz) exactly as before.
>
> Existing installations using AppArmor will *not* be migrated. In case
> the user wishes to migrate manually to SELinux, a guide [0] is provided
> on the openSUSE wiki.

Hi Cathy,

Congratulations on achieving your goal !

My test TW system which was manually migrated to SELinux has worked well
and only had one package issue which has been fixed.

When you said existing installations will *not* be migrated, did you
mean will *never* be migrated unless we manually migrate them OR did you
just mean that nothing is in place to migrate them right now ?

--
Regards,

Joe