본문 바로가기

Core BSP 분석/리눅스 커널 핵심 분석

[Linux Kernel] Selinux: selinux_enforcing_boot

selinux_enforcing_boot is configured within enforcing_setup().
 
#ifdef CONFIG_SECURITY_SELINUX_DEVELOP
static int selinux_enforcing_boot;
 
static int __init enforcing_setup(char *str)
{
unsigned long enforcing;
if (!kstrtoul(str, 0, &enforcing))
selinux_enforcing_boot = enforcing ? 1 : 0;
return 1;
}
__setup("enforcing=", enforcing_setup);
#else
#define selinux_enforcing_boot 1
#endif
 
If you would like to know how selinux_enforcing_boot is updated, please refer to below commit;