https://bugzilla.suse.com/show_bug.cgi?id=1176923 https://bugzilla.suse.com/show_bug.cgi?id=1176923#c6 --- Comment #6 from Jiri Slaby <jslaby@suse.com> --- (In reply to Michal Kubeček from comment #3)
IIUC this is about deprecating *runtime* disable of SELinux so it should not affect the kernel command line parameter.
I was not sure about the SUSE's userspace setup, so I was afraid SECURITY_SELINUX_DISABLE=n would enable selinux, but:
IIRC we have inverted the default in our kernels so that even if SELinux is compiled in, it is disabled by default and needs "selinux=1" command line parameter to have it enabled.
So everything should be fine. So I suppose you will switch it in master and I will inherit it into stable on the 5.9 merge (likely next week), right? -- You are receiving this mail because: You are the assignee for the bug.