Re: Request to re-add option to disable SELinux

[Jon Masters <jcm redhat com>]

On Wed, 2008-07-02 at 16:22 -0400, Jesse Keating wrote:
> On Wed, 2008-07-02 at 16:10 -0400, Jon Masters wrote:
> > 
> > But there are numerous other justifications I could give, including my
> > personal belief that it's absolutely nuts to thrust SE Linux upon
> > unsuspecting Desktop users (who don't know what it is anyway) without
> > giving them the choice to turn it off.
> 
> If they don't know what it is, how are they supposed to decide to shut
> it off or not?

I see your logic Jesse, and I did think about it. But one might also
say, "how about we just force it down their throats because it's good
medicine for them?" ;) I'm concerned that this is what's happening :)

I think what's needed is a nice little paragraph summarizing what
SELinux is aiming to do, and then the old option of setting permissive
or disabling - users can then set permissive if they prefer to.

Jon.