On Tue, 2007-09-25 at 11:48 -0400, Jesse Keating wrote:
On Tue, 25 Sep 2007 09:38:52 -0600
lwn-ft(a)lwn.net (Jonathan Corbet) wrote:
> I'm not running SELinux at all, so I don't think that would change
> much...
How do you have it disabled though? I learned yesterday that there is
an important difference between having it disabled via boot time
argument (selinux=0 or enforcing=0) vs having it disabled in
the /etc/sysconfig/selinux config file (which is what Firstboot would
poke).
Huh? If you have it disabled via /etc/selinux/config, then init doesn't
load a policy and pokes the kernel to disable the hooks. Which should
then be identical to selinux=0
Jeremy