| 1 |
On Fri, 2007-03-16 at 09:17 -0400, Caleb Cushing wrote: |
| 2 |
> I'm thinking of running SElinux on my desktop, as an experiment, but |
| 3 |
> in order to safeguard myself, because I'm not yet that familiar with |
| 4 |
> it is there a way to disable selinux at boot? or some other way I can |
| 5 |
> disable it entirely in case it's making my system unusable. |
| 6 |
> |
| 7 |
> I use grub as a bootloader. |
| 8 |
|
| 9 |
Aside from disabling selinux entirely with the kernel paramater |
| 10 |
selinux=0 (as previously described), you can also run selinux in |
| 11 |
permissive mode. In this case, it will allow anything and log what |
| 12 |
would have been denied in enforcing mode. |
| 13 |
|
| 14 |
The following describes how to switch between permissive and enforcing: |
| 15 |
|
| 16 |
http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=2#doc_chap8 |
| 17 |
|
| 18 |
sf |
| 19 |
|
| 20 |
-- |
| 21 |
gentoo-hardened@g.o mailing list |
Archives