On Friday 16 January 2015 16:31:03 Gordon Messmer wrote: > On 01/15/2015 11:28 PM, Heinz Diehl wrote: > > Selinux requires at least basic knowledge and administration. Most of > > the people I installed Linux for didn't even know it was there or what > > it's good for. > > If you do not use file system permissions for something useful, > chmod -R a+w / > > File system permissions require at least basic knowledge and > administration. Most of the people I installed Linux for don't even > know what they're good for. > > If your computer is single-user anyway, why does it need a security > subsystem? > > > *eyeroll* Having watched this debate I find I must add my own 10c I have spent over 30 years working on unix systems starting with xenix, bsd and ending up with linux ..... We survived quite happily using the well known DAC methods of standard UNIX. (UGO - RWX - setuid etc). Then I worked on some military systems (high security stuff) and started to use SOLARIS CMW (Compartentalised Mode Workstation) and DEC MLS (Multi-Level- Security). These both use the same (probably not as up to date) MAC security via labelling as (I guess) selinux. I can truthfully say I loved UNIX in all its forms until coming across CMW & MLS and now SELINUX - then basically - I wanted OUT!. They are horrendous; if you start to use labelling in earnest - absolutely suicidal!!! - unless you have a real motive - ie you work for the security services or a bank or something and have a massive amount of time to devote. Why do the selinux guys have to force MAC onto all linux users - even hobbyists? Its getting like some kind of religion! Andy Andy -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
