>> For selinux, it works fine and it's all included (via >> bcm2709_selinux_config.patch). >> Be sure that your /boot/cmdline.txt doesn't disable it, and that >> /etc/sysconfig/selinux is correctly configured :-) > Not sure what happens: > cmdline.txt has no reference to selinux at all. > > the config should be OK: > $ grep -v ^# /etc/selinux/config > SELINUX=permissive > SELINUXTYPE=targeted > > It seems to start at boot time: > $ dmesg |grep -i selinux > [ 0.000657] SELinux: Initializing. > [ 0.000705] SELinux: Starting in permissive mode > [ 0.266061] SELinux: Registering netfilter hooks > > But in the end it is disabled: > $ getenforce > Disabled sorry about the noise. I did not notice that my test system was still in redsleeve6 mode. After booting redsleeve7 it is now happy relabeling. Jacco