microsoft / microsoft/WSL

Please, implement selinux=0 kernel command line parameter

Open
#6,757 7 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

feature
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

Is your feature request related to a problem? Please describe.
After installing Fedora33 remix from Microsoft store and upgrading to Fedora 34 I lost any ability to run many Linux utilities because Selinux blocks me :( .
Describe the solution you'd like
Drop SELiux runtime SeLinux can't be disabled during runtime or via configuration anymore.
Since Fedora is the testbench for Kernel features all WSL distros like CentOS, Ubuntu, etc. will lost capabilities to disable SeLinux soon and their upgrades will result in the same showstopper problem.
Describe alternatives you've considered
This is security related decision. Somebody will install newly published distro or upgrade existing published officially by Microsoft and will get published, well described backdoor for reading ssh keys from ~/.ssh
ls /mnt/c/Users/Pavel/.ssh
configWrong id_rsa id_rsa.pub known_hosts
[root@MSI-wsl-wsl ~]#

and publishing it to all world. You event don't need to access distro as root user - it works for any users.
Additional context
Attempt to install Podman on Microsoft published Fedora33remix distro and using it for development.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by examining how WSL handles Linux kernel command-line parameters and the SELinux behavior described for Fedora-based distributions. The work is done when the selinux=0 parameter is supported and its intended effect is verified in the affected WSL scenarios.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux
Domain
operating-systems, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.