SELinux should be off by default in FC3

Nathan Grennan fedora-devel-list at cygnusx-1.org
Wed Oct 6 23:24:22 UTC 2004


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127900

  I reported the bug in at the url above, and was told it was because I
needed to relabel the file. I just moved it from /home/user
to /var/www/html. I don't think it is reasonable to have to relabel
every time a file is moved around to work around possible problems with
SELinux. This could be especially bad with web servers where the users
only have ftp access. They upload files and move them around, but don't
have the ability to run the commands necessary to relabel. Hence I
believe even SELinux targeted should be off by default in FC3, or I
would expect to see lots of such bug reports from users.

 My personal view of SELinux at this point is it sounds nice, but if it
requires running relabel constantly it isn't worth the trouble. The
process needs to be automated.




More information about the fedora-devel-list mailing list