Re: SELinux on Android

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

On Thu, 2011-11-10 at 14:26 +0100, Bhargava Shastry wrote:

> The default value for
> CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE was 19 on my msm
> 2.6.32 kernel. I wonder why. Besides, like I mentioned before, I tried
> to change it to 24 (on seeing the policy mismatch print) but I can
> only set it to 23 (max value menuconfig allows me to enter).

Don't set CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX, and then you
don't need to set a value at all.  The only purpose of the option is to
force the kernel to report an older version than it truly supports, and
that was only to deal with a compatibility issue in Fedora 2/3.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.