Re: Selinux and Compiz

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Oct 26, 2008 at 10:13 AM, Bruno Wolff III <bruno@xxxxxxxx> wrote:
> On Sat, Oct 25, 2008 at 18:59:12 -0500,
>  Jerry Amundson <jamundso@xxxxxxxxx> wrote:
>> Yep, I say leave the question out of the installer, and default it to
>> *disabled*.
>
> Disabled is the worst of the three options because you will need to do a
> relabel if you ever turn it back on. And you don't get useful logs of any
> problems.

I repeat. I think disabled is the best option for the largest
audience. Overall, the majority of time spent re-labeling occurs when
we disable selinux in firstboot.
No selinux. No problems. Everything else that needs to be logged gets logged.

Very simple. Disable SElinux by default. Enable it (at firstboot,
etc.) if you want it. The world becomes a better computing place. :)

jerry
-- 
There's plenty of youth in America - it's time we find the "fountain of smart".

-- 
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
To unsubscribe: 
https://www.redhat.com/mailman/listinfo/fedora-test-list

[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux