udev slowness and selinux

Rahul Sundaram sundaram at redhat.com
Mon Dec 5 15:01:11 UTC 2005


Hi

>>>
>> Wouldnt it be better to continue booting by automatically setting 
>> SELinux into permissive or disabled state while throwing out warnings 
>> at bootup and in the logs?.
>>
>> regards
>> Rahul
>>
> No because this would break your security.  It might be arguable if it 
> should bring it to single user mode though.

In the sense that a non bootable machine is more secure, yes but 
providing a path to recovery would be good.  If I remember right, the 
error message didnt indicate the word SELinux and was pretty obscure. It 
didnt provide any suggestions for recovery either.

regards
Rahul




More information about the fedora-devel-list mailing list