Selinux and Compiz

[Jerry Amundson]

On Sun, Oct 26, 2008 at 10:13 AM, Bruno Wolff III <bruno at wolff.to> wrote:
> On Sat, Oct 25, 2008 at 18:59:12 -0500,
>  Jerry Amundson <jamundso at gmail.com> wrote:
>> Yep, I say leave the question out of the installer, and default it to
>> *disabled*.
>
> Disabled is the worst of the three options because you will need to do a
> relabel if you ever turn it back on. And you don't get useful logs of any
> problems.

I repeat. I think disabled is the best option for the largest
audience. Overall, the majority of time spent re-labeling occurs when
we disable selinux in firstboot.
No selinux. No problems. Everything else that needs to be logged gets logged.

Very simple. Disable SElinux by default. Enable it (at firstboot,
etc.) if you want it. The world becomes a better computing place. :)

jerry
-- 
There's plenty of youth in America - it's time we find the "fountain of smart".