Re: How best get rid of SELinux?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



on 9/21/2007 12:51 PM, Gene Heskett wrote:
> On Friday 21 September 2007, David Boles wrote:
>> on 9/21/2007 2:13 AM, Gene Heskett wrote:
>>> On Friday 21 September 2007, David Boles wrote:
> 
>> This is getting OT for this list.
> 
> I'm subscribed to the selinux list, have been for months.  The amount of 
> actual, usable info there would take an assayor a week to detect.  But I 
> maybe am about to test it by setting it to permissive on my lappy, letting it 
> relabel it and see if I have a network.
> 
> Right now its updating itself.  Then I need to re-install ndiswrapper to match 
> the new kernel its putting in.


Hi Gene. Directed at me? You are still on FC-6 correct? It has been so
long since I used that release I am not sure what 'can of worms' you might
be opening. I honestly do understand your thoughts and feelings here.

SELinux, if I understand it correctly, is not really made to prevent *you*
from doing anything but to stop some piece of malicious or poorly written
software from trashing your system, files, 'stuff' by doing something that
is wrong. The Windows type keylogger that will someday show up in Linux.
Or SPAM relay 'bots. The cute little script that trashes fstab. Or
grub.conf. Things like these. All made up? Sure. But coming soon to a
Linux near you.   ;-)  Could be. It would be nice if the 'protection' was
here first instead of what Windows has. Which is pretty much nothing.

My son tells me that a system very similar to SELinux was being worked on
for Windows Vista and was dropped from the release when they needed to
release and they could not get it to work. I do *not* want that to happen
to Fedora. Or Linux in general.

I will tell you this. The GUI for SELinux in what will be Fedora 8 is nice
and very helpful and much progress has been made in general. That could
account for the little traffic that you mentioned seein on the selinux-list.

You want SELinux off? Go for it. Your choice. I want SELinux on. My choice.

Disabled SELinux does nothing. And the 'horrible waste of HD space' is
about, as near as I can tell something in the neighborhood of 140K. About
the size of this email maybe?  ;-)
-- 

  David


Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux