SELinux
Marcus D. Leech
mleech at ripnet.com
Thu Sep 2 00:56:52 UTC 2010
I've been a security wonk for many years, and the problem I have with
SeLinux is that when it makes a decision I disagree with, it's like
pulling teeth to change it's mind.
So I sometimes just turn it off
Sigh
--
Principal Investigator
Shirleys Bay Radio
Astronomy Consortium
http://www.sbrac.org
On Aug 31, 2010, at 11:13 AM, Alan Cox <alan at lxorguk.ukuu.org.uk> wrote:
>> place. I quote one more from the same thread. This one is from Linus:
>>
>> "I find SELinux to be so irrelevant to my usage that I don't use
>> it at all"
>>
>> http://lkml.org/lkml/2007/10/2/353
>
> Linus is not exactly famous for his ability to understand security
> concepts. I find the fact your argument is produced by google and
> cut/paste rather than technical material ... enlightening
>
> But hey if Linus jumped down a volcano would you follow ?
>
> There *are* cases where you want SELinux off - isolated high
> performance
> computing clusters for example where you want the absolute minimal
> overhead but they also usually turn off other junk Fedora inflicts on
> people by default which is far more pointless - like LVM (unless you
> are
> doing crypted fs stuff)
>
> Alan
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>
More information about the users
mailing list