[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: How best get rid of SELinux?



On Sun, 23 Sep 2007 07:11:15 -0400, David Boles wrote:

> Note that the differences and improvements between SELinux that was in
> FC4 and SELinux that is in Fedora 7 should be considered here also. As
> well as all of the other improvements in the Fedora OS packages. Fedora
> 8 is even better.

	Fwiw, from a point of view necessarily centered on user-
friendliness, every new release of Fedora has been better than the last.  
	
	F7 has brought more trouble along with the improvement, probably 
just because it's the biggest innovation so far. 

	If it hadn't been for somebody telling me about "metacity --
replace &" I might have had to grade back down to FC6 for a while. 

	I really did downgrade for a while from one of the very early 
releases, until somebody in Australia discovered that one of the specs 
for the then new Acer flat panel LCDs was in millimeters. The F7 things 
may be like that : intellectually trivial *once* found* and simple to fix 
-- but capable of making a machine unusable for the uninitiated till then.

	The present case, however, seems likely to be different. The 
permissive SELinux interruptions, being both frequent and 
incomprehensible, were/are irritating rather than disabling -- and the 
constant instruction to touch and reboot was the last straw. Rebooting 
after one of those commands took forever -- and the warning that it would 
was no consolation.

	So I don't doubt that F8 will be better, and a lot better; but I 
do doubt that it will be enough better -- for me, or for the various 
people I keep working on to get them to try linux.

	It won't surprise me in the least if, after a few weeks, I 
disable SELinux again, and start getting antsy for F9. And do installs 
for those others, if any, with it disabled from the git-go.

	I'll certainly do at most that, now that I know, thanks to all 
this discussion, that 'disable' really does mean 'disable' -- i.e., cause 
the whole nine yards of SELinux to do nothing whatever. Both NSA and 
RedHat say so, in English plain enough even for me. I thank them for that.

-- 
Beartooth Staffwright, PhD, Neo-Redneck Linux Convert
Remember I know precious little of what I am talking about.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]