On Wed, 10 Mar 2004 19:27, "Richard Hally" <rhally(a)mindspring.com> wrote:
Fwiw, in grub I set up duplicate sections for a permissive kernel and
an
enforcing kernel using ENFORCING on the title line and enforcing=1 on the
kernel line.
That's the way to do it. I sometimes do the same on my machines. If you
accidentally boot in permissive mode it won't do anything other than fail to
enforce security decisions, after it's booted you can then put it in
enforcing mode.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page