Re: Request to re-add option to disable SELinux

[David Malcolm <dmalcolm redhat com>]

On Wed, 2008-07-02 at 16:10 -0400, Jon Masters wrote:
[snip]
> 
> *). Tools like nautilus do not support labeling of files via the
> right-click properties dialog (gnome VFS, etc.) so there is no easy way
> for an end user who even understands part of this to fix context. This
> is the number one reason why SELinux should not be enabled by default,
> except on systems where there is an admin who can use chcon.

Sounds like a regression; this used to work fine (on this RHEL5 ~ FC6
box I can do this from the Permissions tab of the nautilus file
properties dialog, and watch the SELinux column of the nautilus List
View change).

> 
> But there are numerous other justifications I could give, including my
> personal belief that it's absolutely nuts to thrust SE Linux upon
> unsuspecting Desktop users (who don't know what it is anyway) without
> giving them the choice to turn it off.

What is this "kernel" thing?  Why do I need it?