Re: Disabling selinux question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2008-01-04 at 12:36 +0100, Linus Walleij wrote:
> On Thu, 3 Jan 2008, John Dennis wrote:
> 
> > auditd is the general auditing facility, SELinux messages are just one of the 
> > possible auditing messages.
> 
> But on a Fedora default install SELinux is the only thing using and 
> requiring it, right?

 No, think of it more like a different logging protocol. If you want to
get rid of "Yet another daemon" the best method would be to add audit
input support to the rsyslogd package.

> > setroubleshootd is a diagnostic tool. If SELinux is completely disabled the 
> > daemon exits if started.
> 
> OK, should it have "# hide: true" in /etc/init.d/setroubleshootd so it 
> doesn't even turn up in system-config-services?
> 
> > Allowing 
> > the daemon to decide if it should run or exit is more robust than some 
> > utility which thinks it knows if something should be chkconfig'ed on or not 
> > because it will almost certainly get that answer wrong.
> 
> Then all these smart daemons should have "# hide : true" in their 
> respective /etc/init.d/foo script so avoid being managed by the smart 
> utility system-config-services, am I right?

 This means people can't stop the service, why do you want to do
that? Nothing "bad" happens if you stop any of these.

-- 
James Antill <james.antill@xxxxxxxxxx>
Red Hat

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux