Laurent Bigonville bigon at debian.org
Sun Apr 2 12:35:20 UTC 2017

Le 02/04/17 à 03:25, cgzones a écrit :
> Is there any reason why the standard Debian kernel sets the value for 
> checkreqprot to 1, while the default[1] is 0?
> RedHat[2] seems also to use 0 and from the documentation 0 seems to be 
> the stricter setting.

To be honest I've no idea and the RH bug seems to miss some messages and 
refers to other private bug(s) but I can confirm that on centos 7.3 the 
value is set to 0.

The kernel configuration is done by the kernel team, I'm forwarding your 
question to them on their ML. Maybe they didn't saw the default value 
has changed?

Dear kernel maintainer, do you have an idea about this?

Kind regards,

> [1] 
> https://github.com/torvalds/linux/commit/2a35d196c160e352fa56eabb7952f78f4c85f577
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1264977

More information about the SELinux-devel mailing list