How best get rid of SELinux?

Bruno Wolff III bruno at wolff.to
Fri Sep 21 06:55:19 UTC 2007


On Fri, Sep 21, 2007 at 10:13:39 +0530,
  Rahul Sundaram <sundaram at fedoraproject.org> wrote:
> Tim wrote:
> >On Thu, 2007-09-20 at 21:31 +0530, Rahul Sundaram wrote:
> >>It shouldn't cause any trouble if you set to permissive mode.
> >
> >In the past "permissive" mode still got in the way of some things, and
> >wasn't just the same as disabled but logging what would have happened.
> >Has that changed?
> 
> It is not the same as disabled. Permissive shouldn't block anything 
> however but only log what the denials are. IIRC I have seen some 
> exceptions to this but if any end users are running into such issues, 
> more details would be good to know.

Notably if you disable SELinux, files will no longer be properly labelled when
they are created. So that if you later try to turn it back on, you will need
to do a complete relabel.




More information about the users mailing list