CVS1 and selinux

[Mike McGrath]

On Mon, 21 Sep 2009, Mathieu Bridon (bochecha) wrote:

> On Mon, Sep 21, 2009 at 15:49, Mike McGrath wrote:
> > Selinux on cvs1 is now in enforcing mode.  Please keep an eye out for any
> > oddities or broken services and let us know.
>
> I'm curious, why was it disabled in the first place ?
>
> I guess that's because of something that was discussed before I joined
> this mailing-list, and I'm interested in knowing the problems that
> arose (and the way they were fixed), just for the sake of learning :)
>

It's extremely expensive to go from a non-selinux environment to an
enabled environment.  We just haven't had time to set all of our hosts up
(some still aren't enforcing yet).

Now we get to find out how expensive it is during maintenance :)

	-Mike