Is SELinux mandatory in the kernel ?

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Is SELinux mandatory in the kernel ?

Postby evilangel » Mon Oct 13, 2008 9:50 am

Hi all,

Configuring my kernel to set up GrSecurity, I noticed that SELinux was ticked in the config (based on Debian Stable config).
As I am not using SElinux, can I remove it "safely" from my kernel config ?

By safely, I understand, will applications still be running ?
Or will I need to recompile them ?

I am wondering because SELinux is now quite embedded in Linux, and I don't know how much applications expect it.

Thanks
evilangel
 
Posts: 59
Joined: Thu May 15, 2008 7:57 pm

Re: Is SELinux mandatory in the kernel ?

Postby spender » Mon Oct 13, 2008 10:19 am

It is safe to remove from the kernel. You'll likely see an error message or two at boot related to SELinux, but these are harmless.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Is SELinux mandatory in the kernel ?

Postby evilangel » Tue Oct 14, 2008 8:32 am

OK, i'll compile like this my next kernel.

Thanks
evilangel
 
Posts: 59
Joined: Thu May 15, 2008 7:57 pm


Return to grsecurity support