Re: Request to re-add option to disable SELinux

[Alan Cox <alan redhat com>]

On Wed, Jul 02, 2008 at 04:46:35PM -0400, Jon Masters wrote:
> If it were really black and white like that, then I'd have to argue for
> SELinux to be disabled by default on new Fedora installs and have users
> go into the system config dialog to turn it back on. After all, if
> you're going to use the following argument:

"This car has brakes, enable them ?"
"Would you like the seatbelts to work ?"
"Shall I enable the airbag ?"

> Then consider, those who know what SELinux is are more likely to know
> about that dialog, and therefore more likely to turn it on. If you don't
> like that, then I suggest giving thought to re-instating the option :)

One of the Gnome talks summed this up nicely long ago - how do most users
see dialogue boxes like that - the answer is as random noise you hit the yes
button too.

SELinux should be disablable is the wrong discussion. The discussion you should
be having is "I've filed a few bugs where SELinux didn't magically do the right
thing, how do we fix them and can we make these less likely to occur in future"

If it was a car this discussion ie - "I had a brake problem so I disabled them"
would not be considered sane

Alan