SELinux in Fedora Workstation

alex diavatis alexis.diavatis at gmail.com
Thu May 8 22:41:12 UTC 2014


On Fri, May 9, 2014 at 1:17 AM, Luya Tshimbalanga <luya at fedoraproject.org>wrote:

> On Thu 08 May 2014 03:05:52 PM PDT, alex diavatis wrote:
>
>  I never said to remove it, you can add it optionally on Anaconda. Disk
>> encryption is probably more important than SELinux,
>> but it is still an option.
>>
>
> SELinux is very important because it prevents bad codes doing nasty
> exploitations. The recent case of Portal 2 on Fedora [1]
> only reinforces the use of SELinux as standard in order to discourage bad
> practices from third party developers especially
> those from gaming industries and to adhere to security policies.
>

>From what David [1]said "Some underlying infrastructure our games rely on
is incompatible with SELinux. We are hoping to correct this."
So Steam users should disable SELinux or should stop using Steam, or Valve
is going to be full SELinux compatible?
There are hundreds ways that an application (un-intentionally) can do nasty
exploitations, SELinux un-aware.


>
> In addition, making it options mean removing one of biggest core features
> of Fedora as hardened system.
>

 Anyway, I see your (yours, drago01 and Elad) point!

Thanks!

[1] https://github.com/ValveSoftware/portal2/issues/50

- alex
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/desktop/attachments/20140509/75e13135/attachment.html>


More information about the desktop mailing list