Forward looking to FC2 final and SELinux

Jesse Keating jkeating at j2solutions.net
Wed Apr 7 02:41:56 UTC 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 06 April 2004 19:33, Scott Sloan wrote:
> SELinux in test2 gave me much to think about with never before seen
> output messages, file mount points disappearing, and addition messages
> with every rpm package install. However, even with all the troubles, I
> think SELinux is a beautiful addition to security in fedora and the only
> way we are going to get rid of all its bugs is to run it against any and
> every test we can come up with, just like we do with our kernels and
> other system code. I personally believe it's a bad decision to disable
> it in any current releases, only because if we disable it by default and
> most users don't stray much from system default setups, we will lose
> n-amount of valuable testing, all of which is greatly needed (esp. in
> beta mode). Provide and keep the documentation up to date and encourage
> developers to throw everything at SELinux. After enough testing, most
> errors will be eliminated and no one will notice anymore. Like Alan
> mentioned
>
> >Its no different to the argument about default firewall rules. Now
> >days nobody argues with them, but at the time I got some quite
> >interesting flames about defaulting to firewalling on and it breaking a
> >tiny number of peoples bits of software.
>
> It is just a matter of getting through the headaches between now and
> then. But disabling it I feel would be a lost due to the large amount of
> needed testing we would be missing out on. Be patient, give it time, and
> continue to submit bug reports. Everything will get better... someday :)

Is it the Fedora Project's goal to use final releases as beta tests?  What 
kind of product does that produce?  If you continue to push out buggy 
products and expect full release users to act as beta testers, you're only 
going to drive away your core user group.  Like it or not, the majority of 
the user base is not represented by the participants on these mailing 
lists.  These are just the vocal users.  The non-vocal users, the ones not 
on these lists can't be bothered with beta quality products and will move 
on to somebody else that doesn't use it's full release users as beta 
subjects.  Want SELinux enabled by default?  Fine.  Spend the test cycle 
between FC2 and FC3 fine tuning the bugs that exist.  Use the feedback you 
get from the adventurous users of FC2.  Take your time and have a proper 
release that isn't beta quality to spring SELinux as default upon the 
users.

- -- 
Jesse Keating RHCE	(http://geek.j2solutions.net)
Fedora Legacy Team	(http://www.fedoralegacy.org)
GPG Public Key		(http://geek.j2solutions.net/jkeating.j2solutions.pub)

Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=jkeating
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAc2p04v2HLvE71NURApzWAJwPQwrU0YwHTSQBePGQYlk3zkTmewCfUqtP
WZiNMfgbmnAbIpPvCi7zHCc=
=gZXB
-----END PGP SIGNATURE-----





More information about the fedora-devel-list mailing list