[DSE-Dev] CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
Laurent Bigonville
bigon at debian.org
Sun Apr 2 12:35:20 UTC 2017
Le 02/04/17 à 03:25, cgzones a écrit :
> Is there any reason why the standard Debian kernel sets the value for
> checkreqprot to 1, while the default[1] is 0?
> RedHat[2] seems also to use 0 and from the documentation 0 seems to be
> the stricter setting.
>
To be honest I've no idea and the RH bug seems to miss some messages and
refers to other private bug(s) but I can confirm that on centos 7.3 the
value is set to 0.
The kernel configuration is done by the kernel team, I'm forwarding your
question to them on their ML. Maybe they didn't saw the default value
has changed?
Dear kernel maintainer, do you have an idea about this?
Kind regards,
>
>
> [1]
> https://github.com/torvalds/linux/commit/2a35d196c160e352fa56eabb7952f78f4c85f577
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1264977
More information about the SELinux-devel
mailing list