[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Request to re-add option to disable SELinux - compromise



This would need a bit more hacking to Anaconda, but what about an "Expert security settings" dialog with a note that most users should leave these untouched. In this dialog, experienced sysadmins may switch off selinux, tweak or disable the firewall, and praps other stuff too.

Ingvar

--

Buddha wears an iPod



Den 7. juli. 2008 kl. 09.58 skrev Rahul Sundaram <sundaram fedoraproject org >:

jeff wrote:
But there are numerous other justifications I could give, including my
personal belief that it's absolutely nuts to thrust SE Linux upon
unsuspecting Desktop users (who don't know what it is anyway) without
giving them the choice to turn it off.

If they don't know what it is, how are they supposed to decide to shut
it off or not?
Perhaps by way of a compromise it could be noted in the installation docs if you want to disable SELinux you should add "linux selinux=0" to the boot: line of the install CD. This would make the option available the same way that xfs/reiserfs/jfs are available. The user isn't confronted with it, but Linus[1] can then easily disable it at install time.

The policy has already been fixed and swfdec isn't installed by default so there is no need to do that. It is already documented in the SELinux FAQ now but installation guide can have a reference too. File a RFE.

Rahul

--
fedora-devel-list mailing list
fedora-devel-list redhat com
https://www.redhat.com/mailman/listinfo/fedora-devel-list


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]