Linked by Thom Holwerda on Fri 29th Feb 2008 12:08 UTC, submitted by Rahul
Thread beginning with comment 303080
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
disable selinux?
And face the scorn of a community which will condemn your action as being inexcusable, and assert that you are just stupid and lazy, while advising that you should spend your days fighting the fires with setroubleshoot rather than getting real work done.
For servers facing the Internet, SELinux can be a useful tool. But for most machines the best use of time is, indeed, to turn it off as you suggest.
And face the scorn of a community which will condemn your action as being inexcusable, and assert that you are just stupid and lazy, while advising that you should spend your days fighting the fires with setroubleshoot rather than getting real work done.
For servers facing the Internet, SELinux can be a useful tool. But for most machines the best use of time is, indeed, to turn it off as you suggest.
For servers facing the Internet, SELinux can be a useful tool. But for most machines the best use of time is, indeed, to turn it off as you suggest.
A. Scorn of the community? Which community? Where? Care to elaborate? (As opposed to spewing random allegations?)
B. Fedora is, among other things, about security-out-of-the-box and SELinux is a big part of that. SELinux is -vastly- more important to desktop users them what most people seem to believe. Vulnerabilities will be found and exploited by virus/work/root-kit writers - there nothing to be done about it; But when such vulnerability is found, the only thing standing between the exploit and your precious data/root account/etc is SELinux - nothing else.
C. Fedora is a -community- project. Assuming that all the bugs (SELinux or others) will somehow be magically fixed if you (as a member of community) don't take the time to report them is absurd (and I'm being -very- polite).
D. If you're still not convinced and you do not feel inclined to do anything to improve the situation (by, say, helping to improve SELinux) - I'd suggest you stay clear of Fedora. Really, nobody is forcing you.
For the record, I've got a (large) number of Fedora/CentOS/RHEL machines (I'm a software developer) - all of them with SELinux enabled in enforcing mode. While I have encountered a number of SELinux-related bugs/policy-issues, most of them were fixed within days (if not hours) of the bug report.
Granted, YMMV, but by the tone of your post (and I may be incorrect in reading it) I'd venture and guess that never really tried to help -the developers- help you.
P.S. I'd suggest you read RedHat's 3 years with RHEL 4 report. [1]
- Gilboa
[1] http://www.redhatmagazine.com/2008/02/26/risk-report-three-years-of...







Member since:
2006-01-09
"I hope fedora gets it."
i don't even know what that means.
"Also I dont like their default themes (bluecurve?)."
i think bluecurve disappeared in what, fedora core 2? and an ubuntu user saying they don't like fedora's theme is pretty rich - or do you like that brown mess?
"Couldnt change the mac address of LAN card due to some security issues in feodra."
disable selinux?
"they need to get on the cooler side and win the techie crowd if they want to regain the old glory of redhat."
the real techies do still use fedora - because its the most bleeding edge distro and will eventually end up rolled back into redhat. ubuntu is for beginners.
Edited 2008-03-01 21:43 UTC