[Arm-dev] kernel rebase for rpi2/rpi3 : call for feedback !

Fri Jul 15 12:48:08 UTC 2016
Jacco Ligthart <jacco at redsleeve.org>

>> For selinux, it works fine and it's all included (via
>> bcm2709_selinux_config.patch).
>> Be sure that your /boot/cmdline.txt doesn't disable it, and that
>> /etc/sysconfig/selinux is correctly configured :-)
> Not sure what happens:
> cmdline.txt has no reference to selinux at all.
>
> the config should be OK:
> $ grep -v ^# /etc/selinux/config
> SELINUX=permissive
> SELINUXTYPE=targeted
>
> It seems to start at boot time:
> $ dmesg |grep -i selinux
> [    0.000657] SELinux:  Initializing.
> [    0.000705] SELinux:  Starting in permissive mode
> [    0.266061] SELinux:  Registering netfilter hooks
>
> But in the end it is disabled:
> $ getenforce
> Disabled

sorry about the noise. I did not notice that my test system was still in
redsleeve6 mode. After booting redsleeve7 it is now happy relabeling.

Jacco