SElinux Removal?

Kanwar Ranbir Sandhu m3freak at rogers.com
Wed Apr 19 20:42:55 UTC 2006


On Thu, 2006-13-04 at 17:52 +0100, idonttrustmspassport at ktcasey.plus.com
wrote:
> Is it possible to remove SELinux completely during FC5 installation, or
> even when installed?

Speaking about removal, I have my own problems with the damn thing.  I
have NEVER been able to run Request Tracker on a Red Hat machine with
SElinux in enforcing mode.  I've tried customizing my local policy, but
even when no more AVC's are printed to the log file, RT still refuses to
run.  Put SElinux into permissive mode, and viola, RT is running again.

I know personally of 5 businesses that completely abandoned RHEL 4
because they could not get their apps to work with SElinux enabled.  So,
they made the enlightened decision to go back to RH9.  Brilliant.

Ah well.  I'm hoping one day SElinux will be much easier to admin and
use.  For now, what a massive pain in the ass.

BTW, you should be able to put SElinux into permissive mode.  That
effectively turns SElinux "off" (not completely, but I bet you really
don't care for the explanation). :)

Regards,

Ranbir
-- 
Kanwar Ranbir Sandhu
Linux 2.6.16-1.2069_FC4 i686 GNU/Linux 
16:33:02 up 10:02, 3 users, load average: 0.16, 0.36, 0.38 





More information about the fedora-selinux-list mailing list