On Saturday 29 November 2008 05:16:37 pm Carlos E. R. wrote:
On Saturday, 2008-11-29 at 23:52 +0100, Dave Feustel wrote:
The command sestatus is not found. The command apropos SELinux produces no result in Suse 11. Is SELinux enabled in Suse 11?
Afaik, no; suse uses apparmour instead.
You can do a text search for the word "SELinux" in the security list and find out more info.
openSUSE 11.1 RC1 Compiled *********************************************** # grep "SELINUX" /boot/config-2.6.27.7-4-pae CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 CONFIG_SECURITY_SELINUX_DISABLE=y CONFIG_SECURITY_SELINUX_DEVELOP=y CONFIG_SECURITY_SELINUX_AVC_STATS=y CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT=y # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set Enable or disable *********************************************** selinux [SELINUX] Disable or enable SELinux at boot time. Format: { "0" | "1" } See security/selinux/Kconfig help text. 0 -- disable. 1 -- enable. Default value is set via kernel config option. If enabled at boot time, /selinux/disable can be used later to disable prior to initial policy load. selinux_compat_net = [SELINUX] Set initial selinux_compat_net flag value. Format: { "0" | "1" } 0 -- use new secmark-based packet controls 1 -- use legacy packet controls Default value is 0 (preferred). Value can be changed at runtime via /selinux/compat_net. Packages *********************************************** # zypper se selinux S | Name | Summary | Type --+------------------+-----------------------------------------------------+-------- | libselinux-devel | Development Include Files and Libraries for SELinux | package i | libselinux1 | SELinux library and simple utilities | package | python-selinux | SELinux library and simple utilities | package | ruby-selinux | SELinux library and simple utilities | package | selinux-doc | SELinux documentation | package | selinux-tools | SELinux library and simple utilities | package *********************************************** -- Regards, Rajko -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org