[CentOS] selinux stuff - I just don't get

Tom admin at homemachine.net
Mon Nov 14 11:09:22 UTC 2005


Tony wrote:
> On 11/14/05, *Peter Farrow* <peter at farrows.org 
> <mailto:peter at farrows.org>> wrote:
> 
>     /etc/selinux/config
> 
>     Change this line:
> 
>     SELINUX=enforcing
> 
>     to this:
> 
>     SELINUX=disabled
> 
> 
> It always amazes me how quick people are to suggest that you just switch 
> selinux off, without balancing the suggestion with an explanation of 
> what they are losing by doing this. Would you switch a firewall off 
> because it keeps filling your log files up with packet info?  An English 
> expression involving babies and bathwater springs to mind ;-)
> 
> -- 
> Cheers,
> 
> Tony

please explain then...

selinux seems to cause more problems than it's worth so I'm keen to know 
why we shouldn't disable it.




More information about the CentOS mailing list