On Thu, 2006-01-19 at 13:32 +0000, Timothy Murphy wrote:
Ivan Gyurdiev wrote:
>>> Sorry to be a bore,
>>> but how does one stop selinux running?
>>> Is it sufficient to set "SELINUX=disabled"
>>> in /etc/selinux/config ?
> And no, there is no process to kill, since selinux is in the kernel -
> that's why you have to reboot the machine to turn it off, and pass the
> proper parameters to the kernel.
What are the "proper parameters"?
Setting SELINUX=disabled in /etc/selinux/config is sufficient, but you
can alternatively add selinux=0 to your kernel boot parameters to
disable SELinux. They end up having the same net effect; it is just a
matter of when it gets disabled (immediately via selinux=0 or later
by /sbin/init via /etc/selinux/config).
--
Stephen Smalley
National Security Agency