Component Type: kbuild config

Description: NSA SELinux runtime disable

More info: This option enables writing to a selinuxfs node 'disable', which allows SELinux to be disabled at runtime prior to the policy load. SELinux will then remain disabled until the next boot. This option is similar to the selinux=0 boot parameter, but is to support runtime disabling of SELinux, e.g. from /sbin/init, for portability across platforms where boot parameters are difficult to employ. NOTE: selecting this option will disable the '__ro_after_init' kernel hardening feature for security hooks. Please consider using the selinux=0 boot parameter instead of enabling this option. WARNING: this option is deprecated and will be removed in a future kernel release. If you are unsure how to answer this question, answer N.

Build project: Kconfig (Linux kconfig) (Path: security\selinux\Kconfig )

Other views: file explorer