Simplify SELinux instructions

fedora-minimal/README.md

@@ -1,10 +1,8 @@
 # Enable SELinux
 
 To enable SELinux, do the following after you have run fedora-minimal.sh:
-- Shutdown the VM
+- Shutdown the VM.
 - Run `qvm-features fedora-40-minimal selinux 1`.
-- Start the minimal vm. Wait for it to shut itself down.
-- Run `qvm-features fedora-40-minimal selinux 0`.
-- Turn the VM on, remove `/.autorelabel`.
-- Turn the VM off.
-- Run `qvm-features fedora-40-minimal selinux 1`.
+- Start the minimal VM.
+- Edit /etc/sysconfig/selinux and change SELINUX mode to enforcing.
+- Restart the VM.

fedora-minimal/fedora-minimal.sh

@@ -66,5 +66,4 @@ echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload
 sudo chmod 644 /etc/ld.so.preload
 
 # Prepare for SELinux
-sudo touch /.autorelabel
-sudo sed -i 's/SELINUX=permissive/SELINUX=enforcing/' /etc/sysconfig/selinux
+sudo touch /.autorelabel