Should we enable SELinux for RHEL family integration tests

[shoekstra]

This cookbook should work with SELinux set to enforcing and does contain resources to make it play nice, so we should try to include integration tests that make sure these SELinux related resources run correctly (e.g. the service is started after moving the data or binlog directories).

The question is: do we create additional suites for testing SELinux functionality and only include the RHEL family platforms, or do we make all RHEL family platforms SELinux enabled by default. I would be surprised if something worked with SELinux set to enforcing but did not work when set to permissive, but we are likely to see breakage when vice versa.

Any feedback welcome as I'm torn between what to do.

[dimsh99]

I believe setting SELinux to enforcing for RHEL platforms sounds reasonable.

[damacus]

Not everyone has SELinux set to enforcing when using RedHat, I've yet to come across anyone who does it willingly.

[github-actions]

Marking stale due to inactivity. Remove stale label or comment or this will be closed in 7 days. Alternatively drop by the #sous-chefs channel on the Chef Community Slack and we'll be happy to help! Thanks, Sous-Chefs.