SELinux
Stephen Smalley
sds at epoch.ncsc.mil
Fri Aug 20 16:38:38 UTC 2004
On Fri, 2004-08-20 at 11:47, Thomas E. Dukes wrote:
> Hello (again),
>
> I have read the SELinux FAQ and don't know anymore about than before I
> started except I'm scared to mess with it too much.
>
> Is this really necessary? If not, what is the safest way to turn it
> off? I tried adding selinux=0 in grub.conf but that didn't work. Is
> there a requirement as to where in grub.conf it needs to be? I don't
> have a /etc/sysconfig/selinux file to disable it there. From the FAQ,
> that method doesn't appear to be the safest method.
You need to pass selinux=0 on the kernel command line, so you want to
add it to the end of lines starting with "kernel" in grub.conf.
You can just create your own /etc/sysconfig/selinux file with
SELINUX=disabled. With the stock FC2 kernel, that isn't quite the same
as selinux=0, but with the updated FC2 kernels, it now truly disables
SELinux.
--
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency
More information about the users
mailing list