How best get rid of SELinux?

Mike McCarty Mike.McCarty at sbcglobal.net
Thu Sep 20 20:37:59 UTC 2007


Matthew Miller wrote:
> On Thu, Sep 20, 2007 at 03:47:48PM +0000, Beartooth wrote:
> 
>>	I keep it set to -- supposedly -- NON-enforcing, because of the 
>>warning in the installer against eliminating it; but it keeps making all 
>>kinds of trouble, anyway. Can I just command "yum remove selinux"? 
> 
> 
> No, you can't. You can remove some of the support daemons, but you can't
> remove the libraries because everything is linked against it.
> 
> You can put "selinux=0" on the kernel command line in grub.conf, though.
> That'll make it be disabled completely.

Define "disabled completely" Any defects in the libraries are still
present on the machine. Some of the vulnerabilities SELinux introduces
are still present.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I can explain it for you, but I can't understand it for you.
I speak only for myself, and I am unanimous in that!




More information about the fedora-list mailing list