selinux rant, compressed version (Was Re: kernels won't boot)

Jesse Keating jkeating at redhat.com
Thu Jan 3 20:59:50 UTC 2008


On Thu, 03 Jan 2008 15:56:22 -0500
David Zeuthen <david at fubar.dk> wrote:

> Sure, granted. I wasn't really ranting at the .rpm or .deb people
> here.
> 
> (However, no one prevents you from using SELinux in permissive mode
> during installs or live cd creation and then relabel the fs at the
> end. Heck at least for the latter I'm pretty sure you can't even use
> enforcing mode because the SELinux policy is so draconian as part of
> it's complexity)

Yeah, we have to use permissive at least, or else things fail.

-- 
Jesse Keating
Fedora -- All my bits are free, are yours?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080103/f05c2eb0/attachment.sig>


More information about the fedora-devel-list mailing list