I want to turn on a part of the kernel to make SELinux checking more stringent.

Kevin Kofler kevin.kofler at chello.at
Sat Jan 25 18:37:25 UTC 2014


Just replying to the subject, without going into the implementation details: 
We've just hit two critical regressions, one in Fedora 20 (see the 2+ 
threads about it) and one in Rawhide 
(https://bugzilla.redhat.com/show_bug.cgi?id=1052317, still open!), as a 
result of SELinux checking being TOO stringent, and you want to make it even 
MORE stringent???

Big -1!

It's time to stop the madness and just disable SELinux altogether by 
default!

        Kevin Kofler



More information about the devel mailing list