On Mon, 2004-06-28 at 23:58, Tom London wrote:
Yeah, you don't want to set SELINUXTYPE to permissive. That
appears to
be the
same as selecting the 'targeted' policy. (I guess, 'not strict').
(The comment in the config file says SELINUXTYPE can take one of two
values, targeted or strict).
If you set SELINUXTYPE= to a name that does not exist under
/etc/selinux, then /sbin/init will fail to load a policy, so it should
die if enforcing or proceed under permissive/no-policy otherwise.
--
Stephen Smalley <sds(a)epoch.ncsc.mil>
National Security Agency