Re: [PATCH] selinux(8): note on conflicting configurations

On Tue, Jul 21, 2026 at 3:23 AM Johannes Segitz <[email protected]> wrote:
>
> setting SELINUX=disabled while having selinux=1
> results in a non-booting system. Document this
> here in a note
>
> Signed-off-by: Johannes Segitz <[email protected]>

The patch is fine but wondering if we want to change the libselinux
behavior in this situation.

Acked-by: Stephen Smalley <[email protected]>

> ---
>  libselinux/man/man8/selinux.8 | 9 +++++++++
>  1 file changed, 9 insertions(+)
>
> diff --git a/libselinux/man/man8/selinux.8 b/libselinux/man/man8/selinux.8
> index 5842150b..17df2a99 100644
> --- a/libselinux/man/man8/selinux.8
> +++ b/libselinux/man/man8/selinux.8
> @@ -50,6 +50,15 @@ regardless of what is set in the
>  .I /etc/selinux/config
>  file.
>
> +.B NOTE:
> +When setting a conflicting configuration like
> +.B SELINUX=disabled
> +in
> +.I /etc/selinux/config
> +while having
> +.B selinux=1
> +on the kernel boot options will result in a non-bootable system.
> +
>  The
>  .I /etc/selinux/config
>  configuration file also controls what policy
> --
> 2.55.0