Re: Selinux and Compiz

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Oct 26, 2008 at 13:39:40 -0500,
  Jerry Amundson <jamundso@xxxxxxxxx> wrote:
> 
> I repeat. I think disabled is the best option for the largest
> audience. Overall, the majority of time spent re-labeling occurs when
> we disable selinux in firstboot.

FYI, when you disable selinux a relabel doesn't occur. It's just that
processes stop properly labelling new files, so that if you turn selinux
back on (even in permissive mode), all files on the system need to be checked
to make sure they are properly labelled.

> No selinux. No problems. Everything else that needs to be logged gets logged.

The logs from selinux can be useful even in permissive mode and include
information that is not included in other logs. Whether or not they are
useful often enough to justify the overhead by default is something reasonably
debated.

-- 
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
To unsubscribe: 
https://www.redhat.com/mailman/listinfo/fedora-test-list

[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux