selinux for sap (#584)

* selinux for sap

* tech feedback

* jana's review

Author: Amrita42

DC-SAP-SELinux

@@ -0,0 +1,15 @@
+# This file originates from the project https://github.com/openSUSE/doc-kit
+# This file can be edited downstream.
+
+MAIN="SELinux.asm.xml"
+# Point to the ID of the <structure> of your assembly
+SRC_DIR="articles"
+IMG_SRC_DIR="images"
+
+PROFOS="sles4sap"
+PROFCONDITION="16.0"
+#PROFCONDITION="suse-product;beta"
+#PROFCONDITION="community-project"
+
+STYLEROOT="/usr/share/xml/docbook/stylesheet/suse2022-ns"
+FALLBACK_STYLEROOT="/usr/share/xml/docbook/stylesheet/suse-ns"

concepts/selinux-modes.xml

@@ -42,7 +42,9 @@
     </listitem>
          </varlistentry>
   </variablelist>
-<para>The default in &productnameshort; &productnumber; is <literal>enforcing</literal> mode.</para>
+
+<para os="sles">The default in &productnameshort; &productnumber; is <literal>enforcing</literal> mode.</para>
+<para> <phrase os="sles4sap"> The default in &productname; &productnumber; is enabled in <literal>permissive</literal> mode, if &sap; patterns are installed. </phrase></para>
   <para>
     For information about switching between &selnx; modes, refer to
     <xref linkend="selinux-switching-modes"/>.

concepts/selinux-policy.xml

@@ -39,4 +39,8 @@
     This allows the administrator to customize policies for different parts of the
     system.
   </para>
+  <para os="sles4sap"><emphasis role="bold">About &selnx; for &productname; &productnumber;</emphasis></para>
+  <para os="sles4sap"> The<literal>selinux-policy-sapenablement</literal> package is for &selnx; policy changes for running &sap;.
+    Currently it sets the settings that are needed, but still sets &selnx; to <literal>permissive</literal> mode.
+    This package is installed by default.</para>
 </topic>

tasks/selinux-packages.xml

@@ -68,6 +68,8 @@
     Advanced policy development requires additional <literal>-devel</literal>
     packages, which can be installed by:
   </para>
+
+
 <screen os="sles;sles4sap">
 &prompt.sudo;<command>zypper install selinux-policy-devel policycoreutils-devel</command>
 </screen>