On Fri, 2007-03-16 at 09:17 -0400, Caleb Cushing wrote: > I'm thinking of running SElinux on my desktop, as an experiment, but > in order to safeguard myself, because I'm not yet that familiar with > it is there a way to disable selinux at boot? or some other way I can > disable it entirely in case it's making my system unusable. > > I use grub as a bootloader.
Aside from disabling selinux entirely with the kernel paramater selinux=0 (as previously described), you can also run selinux in permissive mode. In this case, it will allow anything and log what would have been denied in enforcing mode. The following describes how to switch between permissive and enforcing: http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=2#doc_chap8 sf -- [email protected] mailing list
