Comment # 4 on bug 1176923 from
(In reply to Jiri Slaby from comment #2)
> So can anyone sum up what's needed on the openSUSE side before we disable
> the kernel option?

Nothing. One option in /etc/selinux/config will stop working, but since selinux
is disabled by default and we do not yet ship a policy, that's not a problem.
I doubt that anybody did build it's own policy, installed them, enabled selinux
on the commandline only to disable it in userland in a config file shipped with
his policy. He will get a warning if he is doing it since some time.

> Do we support selinux at all?

We support SELinux since SLE11, even if never really invested into it.
SELinux will be mandatory for Carwos and MicroOS, and we hired now somebody who
should maintain the policies for this products.

> Do we need to pass selinux=0 by default?

For this change, no. The code to disable SELinux at runtime is currently even
not part of openSUSE (the config file is missing).


You are receiving this mail because: