Bug 129593

Summary: config file /etc/sysconfig/selinux incorrect about "disabled" option
Product: [Fedora] Fedora Reporter: Karsten Wade <kwade>
Component: system-config-securitylevelAssignee: Paul Nasrat <nobody+pnasrat>
Status: CLOSED RAWHIDE QA Contact: Mike McLean <mikem>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideKeywords: EasyFix
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-09-06 07:24:25 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 123268    

Description Karsten Wade 2004-08-10 19:11:55 UTC
Description of problem:

The current text is incorrect since changes to sysvinit allows for
true disabling of SELinux on boot.

Where it reads:

#       disabled - No SELinux policy is loaded.

It should instead read:

#       disabled - SELinux is fully disabled.

AIUI, this is true for the latest FC2 kernels, and for FC3test1.

There are other locations this might matter, such as the policy.spec
file in each policy package has a hard coded version of the same file
which it echos into /etc/selinux/config if it doesn't exist already.

Version-Release number of selected component (if applicable):

filesystem-2.2.4-1
kernel-2.6.7-1.478
selinux-policy-targeted-1.14.1-5
selinux-policy-strict-1.14.1-5

Comment 1 Paul Nasrat 2004-08-11 10:07:27 UTC
Commited to HEAD it'll get picked up on next build

Comment 2 Karsten Wade 2004-08-23 21:08:26 UTC
Looks good, saw it in a recent build; thanks.

Assume since it's your bug, protocol is you move it to the next step?