That's what I would have done, but SELINUX does not appear to be enabled on Ubuntu's kernel:
$ grep SELINUX /boot/config-2.6.28-11-generic
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_AVC_STATS=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
CONFIG_SECURITY_SELINUX_DEVELOP=y
CONFIG_SECURITY_SELINUX_DISABLE=y
# CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT is not set
# CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set
That's what I would have done, but SELINUX does not appear to be enabled on Ubuntu's kernel:
$ grep SELINUX /boot/config- 2.6.28- 11-generic SECURITY_ SELINUX= y SECURITY_ SELINUX_ AVC_STATS= y SECURITY_ SELINUX_ BOOTPARAM= y SECURITY_ SELINUX_ BOOTPARAM_ VALUE=0 SECURITY_ SELINUX_ CHECKREQPROT_ VALUE=1 SECURITY_ SELINUX_ DEVELOP= y SECURITY_ SELINUX_ DISABLE= y SECURITY_ SELINUX_ ENABLE_ SECMARK_ DEFAULT is not set SECURITY_ SELINUX_ POLICYDB_ VERSION_ MAX is not set
CONFIG_
CONFIG_
CONFIG_
CONFIG_
CONFIG_
CONFIG_
CONFIG_
# CONFIG_
# CONFIG_
The /selinux directory exists, but is empty.