Request to re-add option to disable SELinux

"Sankarshan (সঙ্কর্ষণ)" foss.mailinglists at gmail.com
Thu Jul 3 10:47:28 UTC 2008


Jon Masters wrote:

> Ok then let me just say it. I think the default should be permissive or
> disabled by default. I was hoping to not have to say that - but I think
> it's a lot safer on the mass userbase of Fedora than thrusting a fully
> enforcing SELinux policy set upon them. If I'm having to hack on the
> policy files on my laptop, there's no hope for a desktop user.

One can argue that the path to an objective where everything just works 
with SELinux 'on' begins by forcing the bitter syrup down the throats.

To extend your reasoning, if it were disabled by default, how would one 
move towards just works ?


-- 

http://www.gutenberg.net - Fine literature digitally re-published
http://www.plos.org - Public Library of Science
http://www.creativecommons.org - Flexible copyright for creative work





More information about the devel mailing list