☰

SELinux 已删除，但内核尝试在启动时加载它

tag-icon • tag-icon selinux
SELinux 已删除，但内核尝试在启动时加载它

发行版：Ubuntu 21.04 (Hirsute Hippo)

有人能帮我吗：下面这些文件的来源是什么？我清除了 SELinux* /etc/default/grub 已清除 SELinux，但启动时仍然收到错误。

 root@zika:/home/brad# dmesg |g selinux
    [    0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-5.11.0-31-generic root=UUID=2231b73b-cd11-4c0d-99fd-f8ba4a22b922 ro security=selinux quiet splash
    [    0.036834] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-5.11.0-31-generic root=UUID=2231b73b-cd11-4c0d-99fd-f8ba4a22b922 ro security=selinux quiet splash
    [    1.930280] evm: security.selinux
    root@zika:/home/brad# cat /proc/cmdline
    BOOT_IMAGE=/boot/vmlinuz-5.11.0-31-generic root=UUID=2231b73b-cd11-4c0d-99fd-f8ba4a22b922 ro security=selinux quiet splash

/etc/默认/grub

# If you change this file, run 'update-grub' afterwards to update
# /boot/grub/grub.cfg.
# For full documentation of the options in this file, see:
#   info -f grub -n 'Simple configuration'

GRUB_DEFAULT="0"
#GRUB_TIMEOUT_STYLE="hidden"
GRUB_TIMEOUT="5"
GRUB_DISTRIBUTOR="`lsb_release -i -s 2> /dev/null || echo Debian`"
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
GRUB_CMDLINE_LINUX=" "

# Uncomment to enable BadRAM filtering, modify to suit your needs
# This works with Linux (no patch required) and with any kernel that obtains
# the memory map information from GRUB (GNU Mach, kernel of FreeBSD ...)
#GRUB_BADRAM="0x01234567,0xfefefefe,0x89abcdef,0xefefefef"

# Uncomment to disable graphical terminal (grub-pc only)
#GRUB_TERMINAL="console"

# The resolution used on graphical terminal
# note that you can use only modes which your graphic card supports via VBE
# you can see them in real GRUB with the command `vbeinfo'
#GRUB_GFXMODE="640x480"

# Uncomment if you don't want GRUB to pass "root=UUID=xxx" parameter to Linux
#GRUB_DISABLE_LINUX_UUID="true"

# Uncomment to disable generation of recovery mode menu entries
#GRUB_DISABLE_RECOVERY="true"

# Uncomment to get a beep at grub start
#GRUB_INIT_TUNE="480 440 1"

并重现更改的 /proc/cmdline（我删除了 selinux 并添加了 apparmor）：

root@zika:/etc# cat /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-5.11.0-31-generic root=UUID=2231b73b-cd11-4c0d-99fd-f8ba4a22b922 ro security=apparmor quiet splash

答案1

当你修改的时候/etc/default/grub，你还必须运行sudo update-grub。

/etc/default/grub这将从该文件和其他 GRUB 配置文件重建 GRUB 引导加载程序信息和配置。

这样就会停止在启动时尝试加载 SELinux。

相关内容