Fabian, On Sat, May 21, 2016 at 3:05 PM, (GalaxyMaster) <gm.outside+arm-dev at gmail.com> wrote: > For your builds, however, I'd suggest to adjust > LSM_MMAP_MIN_ADDR to 32768 or even lower, like 16384. This will > likely make your build be able to run in the enforcing mode with the > default CentOS 7 targeted policy. I've looked into the SRPM for the kernel and I found that I was indeed correct: === From: Fabian Arrotin <arrfab "we-do-not-want-spammers-here" armv7-01.dev.centos.org> Date: Tue, 15 Mar 2016 13:48:56 +0000 Subject: [PATCH] Added selinux support --- arch/arm/configs/bcm2709_defconfig | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/arch/arm/configs/bcm2709_defconfig b/arch/arm/configs/bcm2709_defconfig index 39f9a11..824bf1a 100644 --- a/arch/arm/configs/bcm2709_defconfig +++ b/arch/arm/configs/bcm2709_defconfig @@ -1265,3 +1265,23 @@ CONFIG_CRYPTO_SHA512_ARM_NEON=m CONFIG_CRYPTO_AES_ARM_BS=m CONFIG_CRC_ITU_T=y CONFIG_LIBCRC32C=y +CONFIG_AUDIT=y [skipped] +CONFIG_LSM_MMAP_MIN_ADDR=65536 [skipped] +CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 === -- (GM)