Ondrej Mosnacek 53d47e1763 selinux: update kernel boot params when disabling/re-enabling SELinux ... The ability to disable SELinux from userspace based on the configuration file is being deprecated in favor of the selinux=0 kernel boot parameter. (Note that this affects only the "full" disable; switching to/from permissive mode will work the same as before.) Therefore, add an 'update_kernel_param' module parameter that will cause it to set/unset the kernel command-line parameter using grubby when enabling/disabling SELinux. (An explicit parameter was chosen for backwards compatibility.) More information: https://lore.kernel.org/selinux/157836784986.560897.13893922675143903084.stgit@chester/ https://fedoraproject.org/wiki/Changes/Remove_Support_For_SELinux_Runtime_Disable Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>		2021-09-20 10:09:54 +05:30
..
tasks	selinux: update kernel boot params when disabling/re-enabling SELinux	2021-09-20 10:09:54 +05:30
aliases	Bootstrap Collection (#1)	2020-03-13 09:12:26 +00:00