Mark wrote:
Core3 already has SE Linux, but you can chose one of three modes: - Disable it - only throw warnings but don't enforce it - use it it full normal mode. Don't know if FC4 still has that, or if it enforces it now.
The main difference between the FC3 and FC4 SELinux implementations is that in FC4 far more daemons are covered by the default (targeted) SELinux policy, as mentioned in the release notes. There are still the same options of turning it off altogether or running in permissive mode. It's also possible to selectively disable SELinux for each of the protected daemons, so if you're having issues with one particular service (e.g. samba, or maybe httpd), you could turn off SELinux protection for that particular service but leave it on for everything else.
Paul.
