4 ms·
Why is it even possible to disable SELinux at runtime? Because policy configuration happens from userspace. And it doesn't really matter if root users are dis
by forgottenpass 11y ago
Why is it even possible to disable SELinux at runtime?
Because policy configuration happens from userspace. And it doesn't really matter if root users are disabling it, or just doing the equivalent of `chmod -R 777 *` without technically "disabling" it.
- jjuhl 11y agoNo. Because bugs. If you can write to arbitrary kernel memory you can do anything you like. Disable selinux; write funny messages to the console - it's all yours for the taking.