[CentOS] selinux stuff - I just don't get

Mon Nov 14 15:23:15 UTC 2005
Brian T. Brunner <brian.t.brunner at gai-tronics.com>

1: SELinux is hereby invited to grow by giving pain to others, not to me.  When it's ready for release to the unsuspecting world, let it be released in a 'default on' state then. Not now.

2: The word 'but' *always* indicates a denial of the statement before the 'but'.  What's before the 'but' in this case is not just too important to deny, it's an understatement.  SELinux is *broken* if it renders otherwise working applications dysfunctional as shipped.  I don't mind being asked to volunteer to alpha/beta test software.  What's done is to *compel* me to be a SELinux tester, or to disable it.  Everybody who is inclined to help SELinux get ready for The Big Time Release, *please* accept my encouragement to do so.  Us other miserable grunts who want to beta test something else are best off disabling SELinux as of it's current behavior.

"It's needed for security"  meets the "necessary" test, but not the "proper" test, which won't be met until it works without breaking things.

Brian Brunner
brian.t.brunner at gai-tronics.com
(610)796-5838

>>> jperrin at gmail.com 11/14/05 09:29AM >>>

SELinux is going through growing pains, and it's not quite
to the point where I'd call it "user friendly", but


*******************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept
for the presence of computer viruses.

www.hubbell.com - Hubbell Incorporated