No more selinux-policy-*-sources

[Andrew Haley]

Stephen J. Smoogen writes:
 > 
 > To be honest, we have found that the following people turn off SeLinux
 > for the following reasons:
 > 
 > 1) They were told that xyz would be fixed by turning off SeLinux. In
 > most cases, they the problem with xyz was really a config issue that
 > they then fix by hand, but will swear that turning off selinux somehow
 > fixed things. It is similar to problems back in the Red Hat Linux 5.0
 > days where any problem with the system was fixed with a static
 > compiled kernel or application.
 > 
 > 2) They have installed some super nifty kernel module (panassas) or
 > application that selinux (and 90% of the rest of the kernel) does not
 > agree with.
 > 
 > 3) They found a legitimate problem with selinux but did not have the
 > tools to debug it or had the training needed to fix it.
 > 
 > 4) They turn it off because it is outside their experience or religous
 > (Unix) convictions.

5) They don't want enhanced security.  I suspect this is a sizable
   number of people.

Andrew.