Request to re-add option to disable SELinux - compromise

jeff moe at blagblagblag.org
Mon Jul 7 05:32:06 UTC 2008


>> But there are numerous other justifications I could give, including my
>> personal belief that it's absolutely nuts to thrust SE Linux upon
>> unsuspecting Desktop users (who don't know what it is anyway) without
>> giving them the choice to turn it off.
> 
> If they don't know what it is, how are they supposed to decide to shut
> it off or not?

Perhaps by way of a compromise it could be noted in the installation docs if 
you want to disable SELinux you should add "linux selinux=0" to the boot: line 
of the install CD. This would make the option available the same way that 
xfs/reiserfs/jfs are available. The user isn't confronted with it, but Linus[1] 
can then easily disable it at install time.

For this to work, anaconda would have to then pass the selinux=0 to grub.

Benefits:
* Users aren't confronted with dialog box they don't understand
* Power users that "know" they don't need/want selinux still have it available
* Only needs small change to anaconda
* All win

Drawbacks:
* Nonewhatsoever   ;)

-Jeff

[1] https://bugzilla.redhat.com/show_bug.cgi?id=439858




More information about the devel mailing list