Tom Horsley wrote:
On Thu, 28 Jun 2007 20:43:54 -0400
Jim Cornette <fc-cornette(a)insight.rr.com> wrote:
> You can disable it and remove associated programs if you choose to. I
> thought it would be worth mentioning that one who did not find value
> with SELinux has converted to preferring SELinux because the SELinux
> Troubleshooter informs you of the problem along with good explanations
> and corrective actions to allow your system to work as you intend it to
> work.
Oh goody! Now it comes with a useful tool that explains exactly
why it is being a pain in the ass :-).
There are real and potential security issues that SELinux trouble
shooter can inform and help fix. An example of a class of problems
being exposed by SELinux is
http://people.redhat.com/drepper/selinux-mem.html. Not being informed
about those issues might be superficially better but it's false comfort.
Its not a pain at all if I disable it.
Sure. Firewall problems go away if you disable it too.
Rahul