Has the boot param syntax/semantics changed?

[Stephen Smalley]

On Mon, 2004-06-28 at 23:58, Tom London wrote:
> Yeah, you don't want to set SELINUXTYPE to permissive. That appears to 
> be the
> same as selecting the 'targeted' policy. (I guess, 'not strict').
> (The comment in the config file says SELINUXTYPE can take one of two
> values, targeted or strict).

If you set SELINUXTYPE= to a name that does not exist under
/etc/selinux, then /sbin/init will fail to load a policy, so it should
die if enforcing or proceed under permissive/no-policy otherwise.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency