SELinux

James McKenzie jjmckenzie51 at earthlink.net
Tue Jan 18 15:30:28 UTC 2011


On 1/17/11 9:22 PM, Tim wrote:
> On Tue, 2011-01-18 at 01:11 +0200, Kostas Sfakiotakis wrote:
>> not to me mention that fact that am the root of the system ? Why can´t
>> it just back off and let me do what i want to do ?
> And where would it stop?  (At SELinux backing off instead of blocking.)
> It's job is to stop bad things from happening, not to stand idly by and
> let them.
>
> SELinux is another of the protective measures on your system, if you're
> just going to override it, there's not much point having it there, at
> all.
>
> Being root doesn't mean that you should just be allowed to do anything,
> it's not as simple as that.  You'd leave yourself open to all sorts of
> "shooting yourself in the foot" problems.
>
> Made all the more worse when users start running things as root that
> they don't really need to.  Running Acrobat reader as root?  Not a good
> idea.
>
Actually, most programs now check if you are root and refuse to run.  I 
know of at least one.

Can the OP retry as a non-privileged user to see if this happens?

James McKenzie



More information about the users mailing list