FC5 -> FC6 my experience

Andy Green andy at warmcat.com
Sat Oct 28 09:20:59 UTC 2006


Ian Malone wrote:

> Ah, sorry, I meant SELinux breaks so many things and
> relabelling never fixed for me the things that broke.

Updating the policy and relabelling have solved almost everything for me 
in recent times.

> I get away with running SELinux by manually doing
> chcon on the things that break.  I've gone through
> several yum updates now without further problems,
> although I have no idea whether that's because things
> were fixed or my manual adjustments are still in
> effect.

It is an extra layer of crap to deal with, but as I say one only notices 
the upfront pain and not the advantages it can bring.  FWIW people that 
are not exposing services to the Internet on their box are nowadays 
least likely to do something to make them notice SELinux anyway, and if 
their box really fits that description they have a UI to turn it off. 
But if you plan to run any boxes on the internet it is better to get 
used to it, as you seem to have decided yourself.

-Andy




More information about the users mailing list