Selinux out of control

[Chris Murphy]

On Dec 25, 2013, at 12:08 PM, Shawn Starr <shawn.starr at rogers.com> wrote:

> On December 25, 2013 11:04:05 AM Chuck Forsberg WA7KGX wrote:
>> A few days ago SELinux was updated.
>> Selinux now ignores /etc/selinux/config
>> and issues denials.
>> 
>> # This file controls the state of SELinux on the system.
>> # SELINUX= can take one of these three values:
>> #     enforcing - SELinux security policy is enforced.
>> #     permissive - SELinux prints warnings instead of enforcing.
>> #     disabled - No SELinux policy is loaded.
>> SELINUX=disabled
>> # SELINUXTYPE= can take one of these two values:
>> #     targeted - Targeted processes are protected,
>> #     minimum - Modification of targeted policy. Only selected processes
>> are protected.
>> #     mls - Multi Level Security protection.
>> SELINUXTYPE=targeted
>> 
>> 
>> 
>> Is there a way to remove SELinux or at least shut it off?
> 
> Try in grub menu prompt  selinux=0 ?

You're better off  using enforcing=0, which at least preserves the proper labels on all files, rather than disabling selinux entirely which does not. 


Chris Murphy