Stopping SELinux

[Stephen Smalley]

On Thu, 2006-01-19 at 13:32 +0000, Timothy Murphy wrote:
> Ivan Gyurdiev wrote:
> 
> >>> Sorry to be a bore,
> >>> but how does one stop selinux running?
> >>> Is it sufficient to set "SELINUX=disabled"
> >>> in /etc/selinux/config ?
> 
> > And no, there is no process to kill, since selinux is in the kernel -
> > that's why you have to reboot the machine to turn it off, and pass the
> > proper parameters to the kernel.
> 
> What are the "proper parameters"?

Setting SELINUX=disabled in /etc/selinux/config is sufficient, but you
can alternatively add selinux=0 to your kernel boot parameters to
disable SELinux.  They end up having the same net effect; it is just a
matter of when it gets disabled (immediately via selinux=0 or later
by /sbin/init via /etc/selinux/config).

-- 
Stephen Smalley
National Security Agency