It's definitively not a good way to run the server, particularly since it can't be started without user intervention, but it's only for another couple of days to transfer data, and no longer the live server, so at least it's up.
I am curious though.
and getenforce comes back as disabled
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
hosts: files dns mdns
protocols: db files
services: db files
ethers: db files
rpc: db files