Request to re-add option to disable SELinux - compromise
jeff
moe at blagblagblag.org
Mon Jul 7 05:32:06 UTC 2008
>> But there are numerous other justifications I could give, including my
>> personal belief that it's absolutely nuts to thrust SE Linux upon
>> unsuspecting Desktop users (who don't know what it is anyway) without
>> giving them the choice to turn it off.
>
> If they don't know what it is, how are they supposed to decide to shut
> it off or not?
Perhaps by way of a compromise it could be noted in the installation docs if
you want to disable SELinux you should add "linux selinux=0" to the boot: line
of the install CD. This would make the option available the same way that
xfs/reiserfs/jfs are available. The user isn't confronted with it, but Linus[1]
can then easily disable it at install time.
For this to work, anaconda would have to then pass the selinux=0 to grub.
Benefits:
* Users aren't confronted with dialog box they don't understand
* Power users that "know" they don't need/want selinux still have it available
* Only needs small change to anaconda
* All win
Drawbacks:
* Nonewhatsoever ;)
-Jeff
[1] https://bugzilla.redhat.com/show_bug.cgi?id=439858
More information about the fedora-devel-list
mailing list