On Tue, 31 Jul 2012, m.roth@5-cent.us wrote:

To: CentOS mailing list centos@centos.org From: m.roth@5-cent.us Subject: Re: [CentOS] Enabling SELinux on 5.8 32bit

Keith Roberts wrote:

...

If I change SELinux from disabled to enabled (or permissive first) will it take long to rebuild the SEL labels on about 250GB file system?

Go to permissive, and relabel parts yourself, like /usr, /home, then touch /.autorelabel and reboot.

Thanks Marc.

I'm just learning about SEL at the moment, so I want this to be done correctly by the system itself.

Keith

----------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------

On Wed, 1 Aug 2012, John Stanley wrote:

To: CentOS mailing list centos@centos.org From: John Stanley john.stanley@elslc.com Subject: Re: [CentOS] Enabling SELinux on 5.8 32bit

On Wed, 2012-08-01 at 00:33 +0100, Keith Roberts wrote:

It would be 'awsome' if you lost all those SIGs please. It gets annoying and makes me not want to answer any your questions.

You can't go wrong with this [1], [2]. Dan Walsh has the most up2date info on SELinux (rhel maintainer) [3]

*Links May Wrap*

[1]. http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security-E... [2]. http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/Security-En...

[3]. http://danwalsh.livejournal.com/

Hi John.

Thanks for those pointers.

I'm working my way through [2] now, which I downloaded a few days ago.

Kind Regards,

Keith