[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: SELinux survey (was RE: Stupid F7 boot loop)

Tim wrote:
On Wed, 2007-08-29 at 12:02 -0600, Karl Larsen wrote:
    Once about Fedora Core 4 I noticed Selinux was there and I turned
it on. I began to have odd problems. Things stopped working. I
discovered how to turn it off and all problems stopped.

    Since then I always turn it off during installation. Right after I
refuse to give Grub a password :-)

This is really akin to:  Yesterday I found it very hard to unlock my
front door with the key, so now I never lock the door.

I leave SELinux on.  I've modified a few things where necessary.  If a
package update has caused a SELinux problem, I tend to err on reverting
to the prior version, until the fault is fixed.  About the only time I
turn it off is to test something.

I do use a GRUB password.  I've set my system so that you can boot Linux
without it, but you can't change parameters, or boot my computer without
Linux (the boot sequence only include the hard drive, there's a password
locked entry in grub.conf to boot from a floppy).  Naturally, you'll
need a password to log into Linux, all that anyone else can do is reboot
or shutdown from the login screen.  It'll stop shenanigans from
nuisances, anyone who wants to cause me problems will have to open the
box and reset the BIOS settings, or swap hard drives.  That's not
something you can do easily, quickly, or without being noticed.

Tim we have two different computers. Mine is in the study and it has tags stuck on the monitor with my passwords I use often. I turn the computer off at night and when turned on it boots right up to Thunderbird mail.

Yours is at a business where strangers can find there way. And might want to do your computer harm. I have a DSL modem with a 4 port router that has a great hardware firewall. No-one has ever got through it in several years.

   My computers are safe at home.


	Karl F. Larsen, AKA K5DI
	Linux User
	#450462   http://counter.li.org.

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]