Keeping SELinux on (was Attention: Proprietary video driver users (ATI, Nvidia, etc.))

[Ralf Ertzinger]

Hi.

On Thu, 23 Feb 2006 10:19:15 -0700, Lamont R. Peterson wrote:

> details.  It's almost always, "I had problems installing X or doing Y
> and I found a document on the Internet that said that SELinux was in
> the way and didn't work right anyway and was too complicated and
> didn't do me any good and that I couldn't learn enough about it to
> even understand what was happening, let alone deal with it, in less
> than a month and ... well, so I just turn off SELinux and then I
> don't have to deal with it."

I am in exactly that situation right now. I am migrating a whole
bunch of machines over to a selinux-capable system, but I turn
it off, mainly because I do not even remotely know enough about
how it works and how one uses it.

It sucks. Majorly.

Is there a decent book available on understanding and managing
selinux (covering what is available in RHEL4)? I am quite fond
of dead tree versions for learning about a topic, and printing
out PDFs is unsatisfying.