docs: selinux: add '=' signs to kernel boot options
authorRandy Dunlap <rdunlap@infradead.org>
Tue, 1 Mar 2022 04:14:54 +0000 (20:14 -0800)
committerPaul Moore <paul@paul-moore.com>
Mon, 13 Jun 2022 18:59:53 +0000 (14:59 -0400)
commit8d6d51edcb79b0906288170df165c1b86e278218
tree4ff2cffc1d1370da97a4d91dacc5dde4a021c10f
parent2bfe15c5261212130f1a71f32a300bcf426443d4
docs: selinux: add '=' signs to kernel boot options

Provide the full kernel boot option string (with ending '=' sign).
They won't work without that and that is how other boot options are
listed.

If used without an '=' sign (as listed here), they cause an "Unknown
parameters" message and are added to init's argument strings,
polluting them.

  Unknown kernel command line parameters "enforcing checkreqprot
    BOOT_IMAGE=/boot/bzImage-517rc6", will be passed to user space.

 Run /sbin/init as init process
   with arguments:
     /sbin/init
     enforcing
     checkreqprot
   with environment:
     HOME=/
     TERM=linux
     BOOT_IMAGE=/boot/bzImage-517rc6

Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
Cc: Paul Moore <paul@paul-moore.com>
Cc: Stephen Smalley <stephen.smalley.work@gmail.com>
Cc: Eric Paris <eparis@parisplace.org>
Cc: selinux@vger.kernel.org
Cc: Jonathan Corbet <corbet@lwn.net>
[PM: removed bogus 'Fixes' line]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Documentation/admin-guide/kernel-parameters.txt