SELinux disabled on pcluster ami buildtime

[ezrizhu]

SELinux is required to operate within various compliance landscapes.
P Cluster's AMI creation disables and checks that SELinux is disabled.

https://github.com/aws/aws-parallelcluster-cookbook/blob/develop/cookbooks/aws-parallelcluster-platform/test/controls/disable_selinux_spec.rb

https://aws.amazon.com/blogs/hpc/securing-hpc-on-aws-implementing-stigs-in-aws-parallelcluster/ Suggests that it is possible to operate P Cluster in a compliant environment, with SELinux (as implied by the STIGs).

Is there a reason why SELinux is disabled?

[ezrizhu]

on the compute nodes, for slurmd to work on the nfs, we found that remounting /opt/slurm with context="system_u:object_r:bin_t:s0" resolves the SELinux issues.