Linked by Thom Holwerda on Wed 19th Mar 2008 22:58 UTC, submitted by diegocg
Ubuntu, Kubuntu, Xubuntu It's official: SELinux is now available in the Ubuntu development ('Hardy Heron') distribution. "This is the result of the amazing work of the ubuntu-security and ubuntu-hardened teams, as well as the huge contributions from the folks at Tresys (SELinux will not be the default, but is available as a security option)." In other news, Sun has started offering Ubuntu as an option.
Permalink for comment 305813
To read all comments associated with this story, please click here.
RE[3]: Debian already has this?
by sbergman27 on Thu 20th Mar 2008 12:08 UTC in reply to "RE[2]: Debian already has this?"
sbergman27
Member since:
2005-07-24

If it's as simple as adding selinux=0 to your kernel boot string, where's the "very difficult" bit?


The "difficult" bit (perhaps "tricky" might have been a better term) is knowing that you can't just disable it and have it really be out of the way. "Disabling" SELinux during the install, or afterward, merely causes it not to load a policy. I imagine that most people who think they have it disabled really don't, not realizing that you have to manually edit grub.conf to add the right string after every kernel upgrade to avoid the "SELinux tax" on performance.

Edited 2008-03-20 12:16 UTC

Reply Parent Bookmark Score: 2