Workgroup:SELinux: Difference between revisions

From NixOS Wiki
imported>Etbe
Created page with "This group is about adding SE Linux support to NixOS both booting and when run on a system like Debian or Fedora with SE Linux support. == People == * etbe ==..."
 
imported>Etbe
No edit summary
Line 7: Line 7:
== Config ==
== Config ==


  boot.kernelParams = [ "security=selinux" ];
# not yet tested the kernel config
   boot.kernelPatches = [ {
   boot.kernelPatches = [ {
         name = "crashdump-config";
         name = "selinux-config";
         patch = null;
         patch = null;
         extraConfig = ''
         extraConfig = ''

Revision as of 03:52, 25 February 2019

This group is about adding SE Linux support to NixOS both booting and when run on a system like Debian or Fedora with SE Linux support.

People

Config

 boot.kernelParams = [ "security=selinux" ];
  1. not yet tested the kernel config
 boot.kernelPatches = [ {
       name = "selinux-config";
       patch = null;
       extraConfig = 
               SECURITY_SELINUX y
               SECURITY_SELINUX_DEVELOP y
               SECURITY_SELINUX_AVC_STATS y
               SECURITY_SELINUX_CHECKREQPROT_VALUE 0
             ;
       } ];