paste: Anonymous — pastebin.ca

1. Install packages: selinux-utils policycoreutils selinux-policy checkpolicy
    (there will be some error on the package: policy-default , but ignore that.

2. cp /bin/sh /bin/sh.bak ; cp /bin/bash /bin/sh

3. policyvers >> /selinux/policyvers

4. Open with some text aditor: /usr/sbin/genhomedircon
   And on line 35 change the 'shells' to be on the same line as 'excempt:'

5. Change in /etc/selinux/config SELINUXTYPE to "targeted"
   mkdir /etc/selinux/targeted ; cp -r /etc/selinux/contexts /etc/selinux/targeted/

6. cd /etc/selinux/src ; make -

7. make -s -C /etc/selinux/src install

8. sudo apt-get upgrade to get rid of the policy error

9. mkdir /etc/selinux/targeted
   cp -r /etc/selinux/contexts /etc/selinux/targeted/
   fixfiles -f -F relabel

10. selinux-update

11. change in /etc/selinux/config  to this: SELINUXTYPE=.

12. echo "1" >/selinux/enforce

13. grub kernel parameters , enforced=1 selinux=1