Re: [PATCH] selinux(8): note on conflicting configurations

Johannes Segitz <[email protected]> Thu, 23 Jul 2026 10:02:38 +0200

Newsgroups	org.kernel.vger.selinux
Message-ID	<[email protected]>

On Wed, Jul 22, 2026 at 05:46:51PM +0200, Petr Lautrbach wrote:
> Johannes Segitz <[email protected]> writes:
> 
> > setting SELINUX=disabled while having selinux=1
> > results in a non-booting system. Document this
> > here in a note
> >
> > Signed-off-by: Johannes Segitz <[email protected]>
> > ---
> >  libselinux/man/man8/selinux.8 | 9 +++++++++
> >  1 file changed, 9 insertions(+)
> >
> > diff --git a/libselinux/man/man8/selinux.8 b/libselinux/man/man8/selinux.8
> > index 5842150b..17df2a99 100644
> > --- a/libselinux/man/man8/selinux.8
> > +++ b/libselinux/man/man8/selinux.8
> > @@ -50,6 +50,15 @@ regardless of what is set in the
> >  .I /etc/selinux/config
> >  file.
> >
> > +.B NOTE:
> > +When setting a conflicting configuration like
> > +.B SELINUX=disabled
> > +in
> > +.I /etc/selinux/config
> > +while having
> > +.B selinux=1
> > +on the kernel boot options will result in a non-bootable system.
> > +
> >  The
> >  .I /etc/selinux/config
> >  configuration file also controls what policy
> > --
> > 2.55.0
> 
> It seems to work for me on CentOS Stream 10:

Interesting. We got this reported on an older SLES and carried the patch
since then. I just reproduced on a current system and there it also doesn't
happen, so please disregard this patch

Johannes
-- 
GPG Key                EE16 6BCE AD56 E034 BFB3  3ADD 7BF7 29D5 E7C8 1FA0
Subkey fingerprint:    250F 43F5 F7CE 6F1E 9C59  4F95 BC27 DD9D 2CC4 FD66
SUSE Software Solutions Germany GmbH, Frankenstr. 146, 90461 Nürnberg, Germany
www.suse.com, Geschäftsführer: Jochen Jaser, Andrew McDonald, Abhinav Puri, (HRB 36809, AG Nürnberg)

signature.asc (application/pgp-signature, 870 B)