summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--README30
1 files changed, 30 insertions, 0 deletions
diff --git a/README b/README
index f4fadce..35e03f4 100644
--- a/README
+++ b/README
@@ -86,6 +86,36 @@ VIRTUAL-RUNTIME_init_manager = "systemd"
86DISTRO_FEATURES_BACKFILL_CONSIDERED = "" 86DISTRO_FEATURES_BACKFILL_CONSIDERED = ""
87 87
88 88
89Starting up the system
90----------------------
91Most likely the reference policy selected will not just work "out of the box".
92
93As always, if you update the reference policy to better work with OpenEmbedded
94or Poky configurations, please submit the changes back to the project.
95
96When using 'core-image-selinux', the system will boot and automatically setup
97the policy by running the "fixfiles -f -F relabel" for you. This is
98implemented via the 'selinux-autorelabel' recipe.
99
100The 'core-image-selinux-minimal' does not automatically relabel the system.
101So you must boot using the parameters "selinux=1 enforcing=0", and then
102manually perform the setup. Running 'fixfiles -f -F relabel' is available
103in this configuration.
104
105After logging in you can verify selinux is present using:
106
107$ sestatus
108
109Output should include:
110SELinux status: enabled
111...
112Current mode: enforcing
113...
114
115The above indicates that selinux is currently running, and if you are running
116in an enforcing mode or not.
117
118
89License 119License
90------- 120-------
91 121