SELinux Development Support
configname: CONFIG_SECURITY_SELINUX_DEVELOP
Linux Kernel Configuration
└─>Security options
└─>SELinux Development Support
In linux kernel since version 2.6.12 )
This enables the development support option of SELinux,
which is useful for experimenting with SELinux and developing
policies. If unsure, say Y. With this option enabled, the
kernel will start in permissive mode (log everything, deny nothing)
unless you specify enforcing=1 on the kernel command line. You
can interactively toggle the kernel between enforcing mode and
permissive mode (if permitted by the policy) via
/sys/fs/selinux/enforce.
which is useful for experimenting with SELinux and developing
policies. If unsure, say Y. With this option enabled, the
kernel will start in permissive mode (log everything, deny nothing)
unless you specify enforcing=1 on the kernel command line. You
can interactively toggle the kernel between enforcing mode and
permissive mode (if permitted by the policy) via
/sys/fs/selinux/enforce.