mirror of
https://anongit.gentoo.org/git/repo/gentoo.git
synced 2025-12-21 10:50:54 +00:00
ef673f9a03As our own documentation states mcs is the recommended policy type for most users, let's default to mcs in the selinux config file. Closes: https://github.com/gentoo/gentoo/pull/40049 Signed-off-by: Rahul Sandhu <rahul@sandhuservices.dev> Signed-off-by: Jason Zaman <perfinion@gentoo.org>
15 lines
628 B
Text
15 lines
628 B
Text
# This file controls the state of SELinux on the system on boot.
|
|
|
|
# SELINUX can take one of these three values:
|
|
# enforcing - SELinux security policy is enforced.
|
|
# permissive - SELinux prints warnings instead of enforcing.
|
|
# disabled - No SELinux policy is loaded.
|
|
SELINUX=permissive
|
|
|
|
# SELINUXTYPE can take one of these four values:
|
|
# targeted - Only targeted network daemons are protected.
|
|
# strict - Full SELinux protection.
|
|
# mls - Full SELinux protection with Multi-Level Security
|
|
# mcs - Full SELinux protection with Multi-Category Security
|
|
# (mls, but only one sensitivity level)
|
|
SELINUXTYPE=mcs
|