Re: [Libguestfs] [PATCH] Allow selinux=? and enforcing=? kernel flags to be controlled

On 12/08/09 16:22, Richard W.M. Jones wrote: > This is a pretty uncontroversial patch which just allows the > selinux=? and enforcing=? flags on the kernel command line > to be controlled. > > Currently libguestfs unconditionally passes selinux=0. By default > this patch does the same thing, but allows programs to enable SELinux > in the kernel and/or set it to enforcing mode. Patch looks ok except that we shouldn't include the enforcing flag. I can't conceive of any reason we'd want SELinux in enforcing mode in the appliance. If selinux=1, then assume enforcing=0.