SELinux?
mark
m.roth2006 at rcn.com
Thu Nov 1 01:58:10 UTC 2007
Bill Hillier wrote:
> NFlorez at sdcwa.org wrote:
>> How do I disable and enable Selinux?
>>
> setenforce command ....
>
> setenforce 0
> setenforce 1
And reboot. And forget about it. It's a honkin' pain in the neck, unless you're
running a completely canned system, and the users are only allowed to do what
you've allowed them to do. May be fine for, oh, the Pentagon or the CIA, but in
the real world, it's security through making it next to impossible to *do*
anything.
It's like the systems at work that are locked down by corporate. As in, if you
need to add something to c:\windows\system32\drivers\etc\hosts, you need to
either a) get corporate to give you administrator rights (for a week only), or
boot up using knoppix, for example. <g>
mark
More information about the redhat-list
mailing list