From 91fc10df2f2158cb6ae892636e8cff00c3479f42 Mon Sep 17 00:00:00 2001 From: Joe MacDonald Date: Tue, 24 Sep 2013 14:41:00 -0400 Subject: documentation: update guidance for runqemu Testing SELinux on QEMU occasionally results in OOM conditions during a relabel from time to time. Update the documentation to warn about this and suggest a way to avoid the situation. Signed-off-by: Joe MacDonald --- SELinux-FAQ | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/SELinux-FAQ b/SELinux-FAQ index 5894626..b6a0df9 100644 --- a/SELinux-FAQ +++ b/SELinux-FAQ @@ -111,6 +111,14 @@ For example, when you are using qemu targets, $ runqemu qemumips core-image-selinux ext3 nographic bootparams="selinux=0" +The initial filesystem relabel step requires considerable memory and can result +in unexpected, sometimes impossible to reproduce, failures if an OOM condition +occurs while it is in progress. Therefore you should consider allocating at a +minimum 512MB of RAM to your qemu image. 1GB or more is recommended. This is +accomplished by adding qemuparams="-m 1024" to your runqemu options. + +The defaults for various platforms vary, though it is usually around 256MB. + 3.2 - How do I turn enforcing mode on/off? You can specify the SELinux mode in /etc/selinux/config. -- cgit v1.2.3-54-g00ecf