Re: [CentOS] SELinux - way of the future or good idea but !!!

On 12/06/2010 06:06 AM, Daniel J Walsh wrote:

Did you take a look at the AVC messages? Are you running setroubleshoot?

Yes to both.

Usually running something like restorecon -R -v /var/ftp would have cleaned this up, if it is a simple mislabel in /var directory.

The point is *I shouldn't have to*. A stable system should not have breakages from SELinux where 'for some reason' a directory tree got mislabeled during updates. And yet it does. I enable SELinux on only a handful of my systems - and most of those systems acquire SELinux related problems at least once ever year or two just from normal updates.

While SELinux continues to do stuff like this, it will remain disabled on the vast majority of my (and many other people's) systems.