Linked by Thom Holwerda on Wed 19th Mar 2008 22:58 UTC, submitted by diegocg
Permalink for comment 305813
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.





Member since:
2005-07-24
The "difficult" bit (perhaps "tricky" might have been a better term) is knowing that you can't just disable it and have it really be out of the way. "Disabling" SELinux during the install, or afterward, merely causes it not to load a policy. I imagine that most people who think they have it disabled really don't, not realizing that you have to manually edit grub.conf to add the right string after every kernel upgrade to avoid the "SELinux tax" on performance.
Edited 2008-03-20 12:16 UTC