vserver 1.9.3

[linux-2.6.git] / security / selinux / Kconfig

diff --git a/security/selinux/Kconfig b/security/selinux/Kconfig
index 8819822..5a4a798 100644 (file)
--- a/security/selinux/Kconfig
+++ b/security/selinux/Kconfig
@@ -24,6 +24,21 @@ config SECURITY_SELINUX_BOOTPARAM
 
          If you are unsure how to answer this question, answer N.
 
+config SECURITY_SELINUX_BOOTPARAM_VALUE
+       int "NSA SELinux boot parameter default value"
+       depends on SECURITY_SELINUX_BOOTPARAM
+       range 0 1
+       default 1
+       help
+         This option sets the default value for the kernel parameter
+         'selinux', which allows SELinux to be disabled at boot.  If this
+         option is set to 0 (zero), the SELinux kernel parameter will
+         default to 0, disabling SELinux at bootup.  If this option is
+         set to 1 (one), the SELinux kernel paramater will default to 1,
+         enabling SELinux at bootup.
+
+         If you are unsure how to answer this question, answer 1.
+
 config SECURITY_SELINUX_DISABLE
        bool "NSA SELinux runtime disable"
        depends on SECURITY_SELINUX