For some reason, my attempts at enabling SELinux on a squeeze system
just aren't taking.
As I understand it, the following steps are required:
a) installing selinux-policy-default and dependencies
b) editing /etc/selinux/config to select default policy and permissive
or enforcing.
c) adding security=selinux to the grub boot line.
d) ensuring the filesystem selinux contexts are relabeled on reboot
(touch /.autorelabel)
However, for one particular test system, when it comes back up, SELinux
is disabled, and dmesg does not show SELinux in the kernel option line.
I feel like I'm missing something obvious, here.
Any suggestions?