SElinux Removal?

Paul Howarth paul at city-fan.org
Wed Apr 19 20:56:44 UTC 2006


On Wed, 2006-04-19 at 16:42 -0400, Kanwar Ranbir Sandhu wrote:
> On Thu, 2006-13-04 at 17:52 +0100, idonttrustmspassport at ktcasey.plus.com
> wrote:
> > Is it possible to remove SELinux completely during FC5 installation, or
> > even when installed?
> 
> Speaking about removal, I have my own problems with the damn thing.  I
> have NEVER been able to run Request Tracker on a Red Hat machine with
> SElinux in enforcing mode.  I've tried customizing my local policy, but
> even when no more AVC's are printed to the log file, RT still refuses to
> run.  Put SElinux into permissive mode, and viola, RT is running again.

The Fedora Extras rt3 package contains a README.fedora file that tells
you how to get it to work under SELinux.

> I know personally of 5 businesses that completely abandoned RHEL 4
> because they could not get their apps to work with SElinux enabled.  So,
> they made the enlightened decision to go back to RH9.  Brilliant.
> 
> Ah well.  I'm hoping one day SElinux will be much easier to admin and
> use.  For now, what a massive pain in the ass.
> 
> BTW, you should be able to put SElinux into permissive mode.  That
> effectively turns SElinux "off" (not completely, but I bet you really
> don't care for the explanation). :)

# setenforce 0

Paul.





More information about the selinux mailing list