On Thu, 2007-01-18 at 12:57 -0500, Stephen Smalley wrote: > On Thu, 2007-01-18 at 12:44 -0500, Gene Heskett wrote: > > On Thursday 18 January 2007 10:13, Lyvim Xaphir wrote: > > >On Tue, 2007-01-16 at 01:55 -0500, Gene Heskett wrote: > > >> I believe you will have to build a generic kernel.org kernel, > > >> configured without that support, something I have underway right now, > > >> using 2.6.20-rc4. I was amazed at the number of options I found > > >> turned on that a proper 'make oldconfig' should absolutely never have > > >> turned on. My scripts take care of everything but grub.conf for a > > >> kernel install, so when its done all I should have to do is reboot > > >> since I'm already running 2.6.20-rc4. Several things I found may even > > >> account for the apparent slowness of later kernels. Things like 15 > > >> seconds to launch firefox on an xp-2800 athlon with a gig of ram? > > > > > >When you get that kernel up and running, see if you can then do without > > >libselinux installed. > > Not a good idea without rebuilding your userland without selinux > support. Even /sbin/init links against it (to load policy) and will die > without it. Right, which was basically Todd Zullinger's point earlier on, when he suggested that the integration is so deep that you are really considering a distro change. I can certainly confirm what you are saying by hard experience. Not that I'm considering a switch; I'm just interested in learning more about Selinux at this point. It's also interesting to see contributors like you and other user's points of view on this topic. > Stephen Smalley > National Security Agency LX -- °°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°° Off Topic or Political Discussions: http://mandrakeot.mdw1982.com/ http://www.mdw1982.com/mailman/listinfo/mandrakeot "Character is what you do when nobody's looking." - J.C. Watts °°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
