Re: SELinux on F11 on ARM (in QEMU)?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wednesday 21 October 2009 02:32:04 pm Per Nystrom wrote:
> These are the only messages I see from dmesg:
> 
> [root@fedora-arm ~]# dmesg | grep -i selinux
> SELinux:  Initializing.
> SELinux:  Starting in permissive mode

OK, did some checking. SE Linux policy is loaded in the initrd in F-11. The 
reason why is because if its done from /etc/rc.sysinit, then init has the 
wrong context and that leads to lots of problems. So, you would need to boot 
via initrd to have selinux working. The initrd only needs to call load_policy 
and nothing else.

Another approach used back in F-9/10 was to patch init itself to load policy. 
That patch could probably be pulled from cvs. 

-Steve

_______________________________________________
fedora-arm mailing list
fedora-arm@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-arm

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux ARM (Vger)]     [Linux ARM]     [ARM Kernel]     [Fedora User Discussion]     [Older Fedora Users Discussion]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Maintainers]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [Linux Apps]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]

Powered by Linux