Fedora (again) forces me to disable SELinux

Mark markg85 at gmail.com
Tue Apr 1 13:46:10 UTC 2008


2008/4/1, Jeff Spaleta <jspaleta at gmail.com>:
>
>
> On Mon, Mar 31, 2008 at 5:13 PM, Mark <markg85 at gmail.com> wrote:
> > Selinux keeps proving me that it deserves to shut down. i can't help
> > it that it blames me for playing flash animation, using a gif
> > animation in a local web folder or oven just installing updates from
> > fedora itself..
> >
> >
> >
> >
>
> Actually you CAN help.. you CAN help by taking the hint i provided earlier
> and start talking to people through the test list so we can troubleshoot the
> specific messages you have been seeing..instead of doing what you are doing
> right now, which is failing to communicate with enough specificity for
> anyone to confirm or help track down so things can be fixed.  Clearly you've
> made up you mind... you decided you don't WANT to help. That's fine.. that's
> your choice... but do so with the understanding that by doing so you cheapen
> the testing process that the pre-releases is meant to fulfill.  By choosing
> to ignore selinux completely, you certainly aren't living up to the implied
> agreement to act as a responsible tester when you chose to make use of the
> pre-releases.
>   -jef"permissive mode is a available a compromise"spaleta
>

becarefull here! i do test things in fedora (9) and i do report issues
and make suggestions. you can't blame me for not testing something
that i:
1. don't like
2. don't want to have this way
3. don't want to spend my time on

And if you blame me for that than that's your problem!

2008/4/1, David Mansfield <fedora at dm.cobite.com>:
>
>  On Mon, 2008-03-31 at 17:58 -0800, Jeff Spaleta wrote:
>  >
>  >
>  > On Mon, Mar 31, 2008 at 5:13 PM, Mark <markg85 at gmail.com> wrote:
>  >         Selinux keeps proving me that it deserves to shut down. i
>  >         can't help
>  >         it that it blames me for playing flash animation, using a gif
>  >         animation in a local web folder or oven just installing
>  >         updates from
>  >         fedora itself..
>  >
>  >
>  >
>  > Actually you CAN help.. you CAN help by taking the hint i provided earlier and start talking to people through the test list so we can troubleshoot the specific messages you have been seeing..instead of doing what you are doing right now, which is failing to communicate with enough specificity for anyone to confirm or help track down so
>
>
> Hey, to extend this 'you can help' thing, is it possible that a
>  smolt-like setroubleshoot logger could be installed which automatically
>  (after asking for permission of course) posts the denials to a database
>  so developers could see statistics, say, after a big batch of updates?
>
>  I think one thing that's frustrating is to have to open a bugzilla for
>  each and every one.  It's way too much work.  There needs to be a
>  specific way to address these 'bogus' denails and get the updated
>  policies in a streamlined manner, IMHO.
>
>  David

Now that's a great idea! if that was in it now that i would have
turned selinux oin right away just to fill up that database with all
the notices i get ;) seriously.. i would turn it on to submit those
notices.

And something else with selinux.. I think it's bad to ask of users to
relabel it or even to ask users tu run commands to prevent certain
things to happen. Normal new users (who don't know much of linux yet)
might be scared by things like this and might switch from fedora to
another os that doesn't bother the user with those messages
(ubuntu/windows/mac). So that might be something interesting to
investigate..?




More information about the fedora-devel-list mailing list