On Mon, 2004-06-28 at 23:58, Tom London wrote:
Yeah, you don't want to set SELINUXTYPE to permissive. That appears to be the same as selecting the 'targeted' policy. (I guess, 'not strict'). (The comment in the config file says SELINUXTYPE can take one of two values, targeted or strict).
If you set SELINUXTYPE= to a name that does not exist under /etc/selinux, then /sbin/init will fail to load a policy, so it should die if enforcing or proceed under permissive/no-policy otherwise.