(In reply to Jiri Slaby from comment #2) > So can anyone sum up what's needed on the openSUSE side before we disable > the kernel option? Nothing. One option in /etc/selinux/config will stop working, but since selinux is disabled by default and we do not yet ship a policy, that's not a problem. I doubt that anybody did build it's own policy, installed them, enabled selinux on the commandline only to disable it in userland in a config file shipped with his policy. He will get a warning if he is doing it since some time. > Do we support selinux at all? We support SELinux since SLE11, even if never really invested into it. SELinux will be mandatory for Carwos and MicroOS, and we hired now somebody who should maintain the policies for this products. > Do we need to pass selinux=0 by default? For this change, no. The code to disable SELinux at runtime is currently even not part of openSUSE (the config file is missing).