selinux-check-proper-disable.service

This unit is provided by:

• https://packages.fedoraproject.org/pkgs/selinux-policy/

Options

• [Install]
  • WantedBy=multi-user.target
• [Service]
  • EnvironmentFile=/etc/selinux/config
  • ExecCondition=test "$SELINUX" = disabled
  • ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
  • StandardOutput=journal+console
  • SyslogLevel=warning
  • Type=oneshot
• [Unit]
  • After=sysinit.target
  • ConditionKernelCommandLine=!selinux=0
  • Description=Check that SELinux is not disabled the unsafe way

Additionnal notes

Nothing here.