27 Jan
2005
27 Jan
'05
07:14
On Thu, Jan 27, 2005 at 12:37:34PM +0700, Tedi Heriyanto wrote:
Marcus Meissner wrote:
| Well that will enable very basic SELinux support. However all the rest | of selinux, the policies etc are not there. | | So it does not make sense to enable it, it will not change anything. Then, what should I do to enable full support for SELinux ? Recompile and patch the kernel ?
selinux is not just kernel support but requires massive userland support, utilities, policies, patches to userland utilities and so on. SUSE has not yet supplied those patches/policy files/etc, so enabling it in the kernel will just bring kernel instability. Ciao, Marcus