SELinux?

mark m.roth2006 at rcn.com
Thu Nov 1 01:58:10 UTC 2007


Bill Hillier wrote:
> NFlorez at sdcwa.org wrote:
>> How do I disable and enable Selinux?
>>
> setenforce command ....
> 
> setenforce 0
> setenforce 1

And reboot. And forget about it. It's a honkin' pain in the neck, unless you're 
running a completely canned system, and the users are only allowed to do what 
you've allowed them to do. May be fine for, oh, the Pentagon or the CIA, but in 
the real world, it's security through making it next to impossible to *do* 
anything.

It's like the systems at work that are locked down by corporate. As in, if you 
need to add something to c:\windows\system32\drivers\etc\hosts, you need to 
either a) get corporate to give you administrator rights (for a week only), or 
boot up using knoppix, for example. <g>

	mark




More information about the redhat-list mailing list