Request to re-add option to disable SELinux - compromise

Ingvar Hagelund ingvar at linpro.no
Mon Jul 7 10:33:32 UTC 2008


This would need a bit more hacking to Anaconda, but what about an  
"Expert security settings" dialog with a note that most users should  
leave these untouched. In this dialog, experienced sysadmins may  
switch off selinux, tweak or disable the firewall, and praps other  
stuff too.

Ingvar

-- 

Buddha wears an iPod



Den 7. juli. 2008 kl. 09.58 skrev Rahul Sundaram <sundaram at fedoraproject.org 
 >:

> jeff wrote:
>>>> But there are numerous other justifications I could give,  
>>>> including my
>>>> personal belief that it's absolutely nuts to thrust SE Linux upon
>>>> unsuspecting Desktop users (who don't know what it is anyway)  
>>>> without
>>>> giving them the choice to turn it off.
>>>
>>> If they don't know what it is, how are they supposed to decide to  
>>> shut
>>> it off or not?
>> Perhaps by way of a compromise it could be noted in the  
>> installation docs if you want to disable SELinux you should add  
>> "linux selinux=0" to the boot: line of the install CD. This would  
>> make the option available the same way that xfs/reiserfs/jfs are  
>> available. The user isn't confronted with it, but Linus[1] can then  
>> easily disable it at install time.
>
> The policy has already been fixed and swfdec isn't installed by  
> default so there is no need to do that. It is already documented in  
> the SELinux FAQ now but installation guide can have a reference too.  
> File a RFE.
>
> Rahul
>
> -- 
> fedora-devel-list mailing list
> fedora-devel-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-devel-list




More information about the fedora-devel-list mailing list