CONFIG_SECURITY_SELINUX_DISABLE: NSA SELinux runtime disable

General informations

The Linux kernel configuration item CONFIG_SECURITY_SELINUX_DISABLE:

• prompt: NSA SELinux runtime disable
• type: bool
• depends on: CONFIG_SECURITY_SELINUX
• defined in security/selinux/Kconfig
• found in Linux kernels: 2.6.6–2.6.39, 3.0–3.19, 4.0–4.20, 5.0–5.19, 6.0–6.3

Help text

This option enables writing to a selinuxfs node 'disable', which allows SELinux to be disabled at runtime prior to the policy load. SELinux will then remain disabled until the next boot. This option is similar to the selinux=0 boot parameter, but is to support runtime disabling of SELinux, e.g. from /sbin/init, for portability across platforms where boot parameters are difficult to employ.

NOTE: selecting this option will disable the '__ro_after_init' kernel hardening feature for security hooks. Please consider using the selinux=0 boot parameter instead of enabling this option.

WARNING: this option is deprecated and will be removed in a future kernel release.

If you are unsure how to answer this question, answer N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: