No selinux whatsoever

John Summerfield debian at herakles.homelinux.org
Fri Jan 18 00:11:57 UTC 2008


Gary Thomas wrote:
> I'm trying to use anaconda+kickstart to load up a deeply
> embedded platform.  This device will never need nor use
> selinux, so I want to figure out how to keep it from
> ever being installed, whatsoever.

You're using the wrong Linux distro; selinux is built into the kernel.
[root at numbat ~]# grep SELINUX /boot/config-2.6.18-8.1.15.el5 | head -1
CONFIG_SECURITY_SELINUX=y
[root at numbat ~]#


> 
> How do I make this happen in the kickstart file?
> 
> Note: this is such a resource limited platform that simply
> installing the "selinux-policy-targetted" RPM takes around
> 5 hours!  Hence my desire to never even try.

If you want prebuilt binaries I suggest Debian. Note that Debian's 
moving to apparmour, but I don't know what its implications are.



-- 

Cheers
John

-- spambait
1aaaaaaa at coco.merseine.nu  Z1aaaaaaa at coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)




More information about the Kickstart-list mailing list