Re: Enable SELinux via boot parameter

[Tom <tom@lemuria.org>]

On Tue, Sep 02, 2003 at 10:07:32PM -0500, Chris PeBenito wrote:
> There is one thing I don't like about this.  SELinux should be by
> default on.  You should have to specify that its disabled, rather than
> the opposite.  In general if people are compiling their own kernels, and
> they want SELinux, they'll want it enabled by default, and shouldn't
> need to specify extra kernel parameters.  The distributions shipping one
> single kernel is more of a special case.

The broad public will not be using SELinux for now, so I'm afraid it's
not really a special case.

There should, however, be a kernel config option to turn it on by
default and FORCE it on. (i.e. no way to boot that kernel without SE
enabled). Otherwise we have a trivial boot security problem.

I know securing physical access to the system isn't really the scope of
SE, but it shouldn't be THAT easy.



-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.