[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: udev slowness and selinux



Rahul Sundaram wrote:
Stephen Smalley wrote:

On Mon, 2005-12-05 at 05:49 -0800, Steve G wrote:
Hence, I would have expected init to log the "Enforcing mode
requested but no policy loaded. Halting now." message (from
sysvinit-selinux.patch) and then exit normally.
I think for lspp we want it to go to a console prompt where the admin can
investigate the problem and make repairs.

The admin already has options there:
- boot with init=bash to bypass init altogether, or
- boot with enforcing=0 single to prevent init from halting if it cannot
load policy and only come up single-user.

But the proper behavior if policy cannot be loaded and the system is in
enforcing mode is to halt.
Wouldnt it be better to continue booting by automatically setting SELinux into permissive or disabled state while throwing out warnings at bootup and in the logs?.

regards
Rahul

No because this would break your security. It might be arguable if it should bring it to single user mode though.

--



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]