From d6a89a6fa7e29b8ded7419dd85c890315db7549e Mon Sep 17 00:00:00 2001 From: Matthew Garrett Date: Fri, 14 Aug 2015 11:37:26 -0700 Subject: [PATCH] Turn on selinux in the kernel Enable selinux by default. It won't do anything unless a policy gets loaded. --- .../sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 index 6c90ff5f2d..b5d85c9284 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 +++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/files/amd64_defconfig-4.1 @@ -923,8 +923,8 @@ CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_NETWORK_XFRM=y CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y -CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 -CONFIG_SECURITY_SELINUX_DISABLE=y +CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1 +CONFIG_SECURITY_SELINUX_DISABLE=n # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set CONFIG_CRYPTO_CRC32C_INTEL=m CONFIG_CRYPTO_SHA1_SSSE3=m