[DSE-Dev] CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE

[Laurent Bigonville]

Le 02/04/17 à 03:25, cgzones a écrit :
> Is there any reason why the standard Debian kernel sets the value for 
> checkreqprot to 1, while the default[1] is 0?
> RedHat[2] seems also to use 0 and from the documentation 0 seems to be 
> the stricter setting.
>

To be honest I've no idea and the RH bug seems to miss some messages and 
refers to other private bug(s) but I can confirm that on centos 7.3 the 
value is set to 0.

The kernel configuration is done by the kernel team, I'm forwarding your 
question to them on their ML. Maybe they didn't saw the default value 
has changed?

Dear kernel maintainer, do you have an idea about this?

Kind regards,

>
>
> [1] 
> https://github.com/torvalds/linux/commit/2a35d196c160e352fa56eabb7952f78f4c85f577
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1264977