Stopping SELinux

[Timothy Murphy]

Stephen Smalley wrote:

> On Thu, 2006-01-19 at 13:32 +0000, Timothy Murphy wrote:
>> > And no, there is no process to kill, since selinux is in the kernel -
>> > that's why you have to reboot the machine to turn it off, and pass the
>> > proper parameters to the kernel.
>> 
>> What are the "proper parameters"?
> 
> Setting SELINUX=disabled in /etc/selinux/config is sufficient, but you
> can alternatively add selinux=0 to your kernel boot parameters to
> disable SELinux.  They end up having the same net effect; it is just a
> matter of when it gets disabled (immediately via selinux=0 or later
> by /sbin/init via /etc/selinux/config).

OK, thanks. I did realize this,
but was being a little snide as the advice to
"pass the proper parameters to the kernel"
struck me as not very helpful -
I didn't notice it was the same poster
who had previously mentioned "selinux=0".

Incidentally, I do find kernel parameters fairly confusing.
Is there a list anywhere of the possibilites (is the number finite?)
anywhere?
There used to be a very useful list in the RedHat manual.


-- 
Timothy Murphy  
e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland