A Modest Suggestion to make SElinux usable.

Rahul Sundaram sundaram at fedoraproject.org
Mon Jun 1 15:35:35 UTC 2009


On 06/01/2009 08:48 PM, Tom Horsley wrote:

> I thought all the setroubleshoot nonsense was primarily designed to
> simplify saying "just go ahead and allow this"?

In some cases but definitely not blindly.
> 
>> [ * ] Just allow automatically
> 
> Nah, I don't need that - turning off selinux works even better (and I
> don't have to waste my time turning it off one little bit at a time :-).

Sure. You can turn off any security measure completely. It is just a
trade off. No different than chmod -R 777 *

Rahul




More information about the test mailing list