[CentOS] selinux stuff - I just don't get

Giovanni P. Tirloni gpt at tirloni.org
Mon Nov 14 11:20:04 UTC 2005

Tony wrote:
  > It always amazes me how quick people are to suggest that you just 
> selinux off, without balancing the suggestion with an explanation of 
> what they are losing by doing this. Would you switch a firewall off 
> because it keeps filling your log files up with packet info?  An English 
> expression involving babies and bathwater springs to mind ;-)

  Not to turn this into a flamewar but I'd like to mention that for 
someone who has always lived with SELinux it brings no advantage to keep 
it on _and_ causing problems. Specially when you still didn't have time 
to read carefully how SELinux is going to really help you (besides 
breaking things).

  I'm all for SELinux.. just not it's deployment without planning. 
That's why I've inclued a URL to the unofficial SELinux FAQ, so he could 
disable it but read about what it was later.

Giovanni P. Tirloni

More information about the CentOS mailing list