On Fri, 2004-08-20 at 11:47, Thomas E. Dukes wrote: > Hello (again), > > I have read the SELinux FAQ and don't know anymore about than before I > started except I'm scared to mess with it too much. > > Is this really necessary? If not, what is the safest way to turn it > off? I tried adding selinux=0 in grub.conf but that didn't work. Is > there a requirement as to where in grub.conf it needs to be? I don't > have a /etc/sysconfig/selinux file to disable it there. From the FAQ, > that method doesn't appear to be the safest method. You need to pass selinux=0 on the kernel command line, so you want to add it to the end of lines starting with "kernel" in grub.conf. You can just create your own /etc/sysconfig/selinux file with SELINUX=disabled. With the stock FC2 kernel, that isn't quite the same as selinux=0, but with the updated FC2 kernels, it now truly disables SELinux. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency
