Tom Horsley wrote:
On Thu, 28 Jun 2007 20:43:54 -0400
Jim Cornette <fc-cornette@xxxxxxxxxxxxxx> wrote:
You can disable it and remove associated programs if you choose to. I
thought it would be worth mentioning that one who did not find value
with SELinux has converted to preferring SELinux because the SELinux
Troubleshooter informs you of the problem along with good explanations
and corrective actions to allow your system to work as you intend it to
work.
Oh goody! Now it comes with a useful tool that explains exactly
why it is being a pain in the ass :-).
There are real and potential security issues that SELinux trouble
shooter can inform and help fix. An example of a class of problems
being exposed by SELinux is
http://people.redhat.com/drepper/selinux-mem.html. Not being informed
about those issues might be superficially better but it's false comfort.
Its not a pain at all if I disable it.
Sure. Firewall problems go away if you disable it too.
Rahul
