From 2e5cd1048bd0e2249996562054f90ee341c6208c Mon Sep 17 00:00:00 2001 From: Mirek Jahoda Date: Dec 11 2020 16:52:51 +0000 Subject: Update modules/release-notes/pages/sysadmin/Security.adoc Add a description for https://pagure.io/fedora-docs/release-notes/issue/555 (runtime disabling SELinux) --- diff --git a/modules/release-notes/pages/sysadmin/Security.adoc b/modules/release-notes/pages/sysadmin/Security.adoc index dcabdc5..d6c36e3 100644 --- a/modules/release-notes/pages/sysadmin/Security.adoc +++ b/modules/release-notes/pages/sysadmin/Security.adoc @@ -1,5 +1,12 @@ - include::{partialsdir}/entities.adoc[] [[sect-security]] = Security + +== Support for disabling SELinux through `/etc/selinux/config` has been removed + +With this release, support for disabling SELinux through the `SELINUX=disabled` option in the `/etc/selinux/config` file has been removed from the kernel. Furthermore, the Anaconda installation program and the corresponding man pages have been updated to reflect this change. This change also enables read-only-after-initialization protection for the Linux Security Module (LSM) hooks. + +If your scenario requires to disable SELinux, add the `selinux=0` parameter to your kernel command line. + +See the link:https://docs.fedoraproject.org/en-US/quick-docs/changing-selinux-states-and-modes/[Changing SELinux states and modes] section in Fedora Quick Docs and the link:https://fedoraproject.org/wiki/Changes/Remove_Support_For_SELinux_Runtime_Disable[] for more information.