Testing SELinux on QEMU occasionally results in OOM conditions during a relabel from time to time. Update the documentation to warn about this and suggest a way to avoid the situation.
Signed-off-by: Joe MacDonald <[email protected]> --- SELinux-FAQ | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/SELinux-FAQ b/SELinux-FAQ index 5894626..b6a0df9 100644 --- a/SELinux-FAQ +++ b/SELinux-FAQ @@ -111,6 +111,14 @@ For example, when you are using qemu targets, $ runqemu qemumips core-image-selinux ext3 nographic bootparams="selinux=0" +The initial filesystem relabel step requires considerable memory and can result +in unexpected, sometimes impossible to reproduce, failures if an OOM condition +occurs while it is in progress. Therefore you should consider allocating at a +minimum 512MB of RAM to your qemu image. 1GB or more is recommended. This is +accomplished by adding qemuparams="-m 1024" to your runqemu options. + +The defaults for various platforms vary, though it is usually around 256MB. + 3.2 - How do I turn enforcing mode on/off? You can specify the SELinux mode in /etc/selinux/config. -- 1.7.10.4 _______________________________________________ yocto mailing list [email protected] https://lists.yoctoproject.org/listinfo/yocto
