SeLinux

[T. Nifty Hat Mitchell]

On Tue, Jun 22, 2004 at 10:52:52AM -0700, edwarner99 at yahoo.com wrote:
> Reply-To: For users of Fedora Core releases <fedora-list at redhat.com>
> 
> Any advantages to enabling selinux vs. not?

There are advantages.

Since you are asking the odds are that the learning curve would get in
your way at this time.

For the curious I would suggest installing it but set it in permissive mode.
This permits you to see access violation messages in /var/log/messages
but programs are not stopped from doing things.

Things like CDROM reader and writer, the mounting of USB filesystems
used for cameras and such gets more complex.  For the average home
user with two or three users it is overkill.  Permissive mode does put
things in place and starts the process that keeps security labels on
files, dirs, users and applications current.

Summary: permissive mode is where folks that understand Linux
basics should start with SELinux.


-- 
	T o m  M i t c h e l l 
	/dev/null the ultimate in secure storage.