security_disable

Section: SELinux API documentation (3)
Updated: 21 Nov 2009
Index Return to Main Contents

NAME

security_disable - disable the SELinux kernel code at runtime.

SYNOPSIS

#include <selinux/selinux.h>

int security_disable(void);

DESCRIPTION

security_disable disables the SELinux kernel code, unregisters selinuxfs from /proc/filesystems, and then unmounts /selinux.

This function can only be called at runtime and prior to the initial policy load. After the initial policy load, the SELinux kernel code cannot be disabled, but only placed in "permissive" mode by using setenforce(1).

RETURN VALUE

security_disable returns zero on success or -1 on error.

AUTHOR