MLS and Desktop ENvironment

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/12/2011 03:16 AM, H S wrote:
> Please let me know how could I boot in to my fedora 14 system with
> selinux-mls policy, in runleve grater than 3 as the manual said?
> (step by step commands / method)
> Thanks,
> 
> 
> 
> 
> 
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux

On a machine that boots in graphical mode
install selinux-policy-mls
Modify /etc/selinux/config to say it is going to run with mls policy.
Also change flag to permissive mode.
touch /.autorelabel
reboot
You can also boot the machine in permissive mode by adding enforcing=0
to kernel command line.
When the machine boots it should be in graphical mode.
You can now put the machine into enforcing mode (# setenforce 1)  And
change the /etc/selinux/config file to enforcing.

Now you get the fun of running in an MLS environment.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk2kV7UACgkQrlYvE4MpobN/fgCeP9Wt7sViJmBmPFw+YryeCCLQ
DXEAn1X4bbkrO8nUPRC2y9L+DP5x8Vw9
=tGUI
-----END PGP SIGNATURE-----