2017-06-09 14:45 GMT+02:00 Stephen Smalley <sds@xxxxxxxxxxxxx>: > Kernel version and config, particularly the CONFIG_SECURITY_SELINUX > ones? And are you using any other SELinux-related kernel command line > options (e.g. enforcing=, selinux=)? standard Debian sid kernel: Linux server02 4.9.0-3-amd64 #1 SMP Debian 4.9.30-1 (2017-06-04) x86_64 GNU/Linux $ grep -i selinux /boot/config-4.9.0-3-amd64 CONFIG_SECURITY_SELINUX=y # CONFIG_SECURITY_SELINUX_BOOTPARAM is not set # CONFIG_SECURITY_SELINUX_DISABLE is not set CONFIG_SECURITY_SELINUX_DEVELOP=y CONFIG_SECURITY_SELINUX_AVC_STATS=y CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0 # CONFIG_DEFAULT_SECURITY_SELINUX is not set $ cat /proc/cmdline BOOT_IMAGE=/boot/vmlinuz-4.9.0-3-amd64 root=UUID=1e528afb-83e1-489e-b2f7-1ad1d73d145c ro security=selinux nomodeset elevator=noop
