On Saturday, 26 September 2020 17:41:06 BST Dan Egli wrote:
> Questions regarding SELinux. Two of them actually. First is how the HECK
> to I get it enabled!? I compiled my kernel to support it, and I do not
> have the disabling line in my boot config. But after rebooting to the
> new kernel, getenforce says disabled. So why is it disabled and how do I
> enable it?
There are a number of steps you need to follow to configure a selinux kernel
and utilities. Have you walked through these guides?
https://wiki.gentoo.org/wiki/SELinux
In particular, the Installation guide?
https://wiki.gentoo.org/wiki/SELinux/Installation
> Next, whenever I try to install a SELinux policy that portage missed
> during it's install (not many, but a couple) I get an error. I've
> already created a bug on this
> (https://bugs.gentoo.org/show_bug.cgi?id=744736), but I was wondering if
> anyone on the list had any ideas as to what's wrong.
>
>
> Thanks!
In the first instance set 'SELINUX=permissive' in the selinux config and see
if it works as expected. Address any errors/warnings and then try switching
to enforcing.
signature.asc
Description: This is a digitally signed message part.