On Mon, 2004-06-28 at 23:58, Tom London wrote: > Yeah, you don't want to set SELINUXTYPE to permissive. That appears to > be the > same as selecting the 'targeted' policy. (I guess, 'not strict'). > (The comment in the config file says SELINUXTYPE can take one of two > values, targeted or strict). If you set SELINUXTYPE= to a name that does not exist under /etc/selinux, then /sbin/init will fail to load a policy, so it should die if enforcing or proceed under permissive/no-policy otherwise. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency
