Re: How NSA access was built into Windows

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2007-01-20 at 07:44 +1030, Tim wrote:
> On Fri, 2007-01-19 at 07:40 -0500, Stephen Smalley wrote:
> > The entire discussion of allowing one to rpm -e libselinux is a red
> > herring; applications already perform an is_selinux_enabled() test
> > before performing SELinux processing and skip it if disabled.
> > Supporting removal of libselinux would just mean that those
> > applications would first dlopen() libselinux (vs. direct calls to the
> > libselinux functions, which create the current fixed link-time
> > dependency) and fall back to the selinux-disabled code path if
> > libselinux isn't present.  But in both cases, you are relying on the
> > application code to follow the right branch and to truly skip all
> > SELinux processing when selinux isn't enabled / libselinux isn't
> > present.  It might make a difference in terms of code bloat (although
> > libselinux isn't that big and you are trading off runtime performance
> > for the dlopen), but it doesn't change the trust issues. 
> 
> For some people, having it running certainly causes a performance loss.
> Whether that's down to SELinux, itself, or the logging, I've not
> experimented with.
> 
> -- 
> (Currently testing FC5, but still running FC4, if that's important.)
> 
> Don't send private replies to my address, the mailbox is ignored.
> I read messages from the public lists.
> 

Have you been able to get around the lag with selinux=0?


LX
-- 
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°
Off Topic or Political Discussions:
http://mandrakeot.mdw1982.com/
http://www.mdw1982.com/mailman/listinfo/mandrakeot

"Character is what you do when nobody's looking." - J.C. Watts
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux