SELinux

[Antonio Olivares]

--- "Gregory P. Ennis" <PoMec at PoMec.Net> wrote:

> On Fri, 2006-06-09 at 14:24 +0100, Paul Howarth
> wrote:
> 
> 
> > 
> > SELinus is far from being window-dressing; when
> configured properly it 
> > is capable of restricting each process to the
> minimum capabilities that 
> > that process needs to do its job, and most
> exploits require that 
> > processes be circumvented to so something else,
> hence SELinux offers 
> > protection against those exploits.
> > 
> > Paul.
> > 
> 
> I really like the idea of SELinux, but have had to
> turn it to permissive
> mode until I can learn how to tweak it for my
> purposes.  I just have not
> had the time to do this yet.  Are their tutorials
> you would recommend.
> On one of my trips to Barnes and Knoble I looked for
> some published work
> on SELinux but could not find anything.
> 
> Greg
> 
> -- 
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe:
> https://www.redhat.com/mailman/listinfo/fedora-list
> 
In some regards, I disabled it on a machine running
FC3 because it did not let me do anything.  I could
not get it to work properly.  However on most of my
other machines FC4 and FC5 respectively, selinux is
running and yes there are some problems but I was
persistant and asked and asked and by reading and
carefully studying the tutorials and by some sort of
luck everything started to work again.  

It is better to have it enabled.  If something does
not work, ask for help, and (worst case scenario) no
one provides help and you feel helpless and have tried
this and that and it does not work.  Set it to
permissive or disable it.

http://fedoraproject.org/wiki/SELinux

Regards,

Antonio

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com