On Wed, 10 Mar 2004 19:27, "Richard Hally" <rhally@xxxxxxxxxxxxxx> wrote: > Fwiw, in grub I set up duplicate sections for a permissive kernel and an > enforcing kernel using ENFORCING on the title line and enforcing=1 on the > kernel line. That's the way to do it. I sometimes do the same on my machines. If you accidentally boot in permissive mode it won't do anything other than fail to enforce security decisions, after it's booted you can then put it in enforcing mode. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page