|| ||Alan Cox <alan-AT-redhat.com>|
|| ||Development discussions related to Fedora <fedora-devel-list-AT-redhat.com>|
|| ||Re: Request to re-add option to disable SELinux|
|| ||Wed, 2 Jul 2008 17:16:10 -0400|
On Wed, Jul 02, 2008 at 04:46:35PM -0400, Jon Masters wrote:
> If it were really black and white like that, then I'd have to argue for
> SELinux to be disabled by default on new Fedora installs and have users
> go into the system config dialog to turn it back on. After all, if
> you're going to use the following argument:
"This car has brakes, enable them ?"
"Would you like the seatbelts to work ?"
"Shall I enable the airbag ?"
> Then consider, those who know what SELinux is are more likely to know
> about that dialog, and therefore more likely to turn it on. If you don't
> like that, then I suggest giving thought to re-instating the option :)
One of the Gnome talks summed this up nicely long ago - how do most users
see dialogue boxes like that - the answer is as random noise you hit the yes
SELinux should be disablable is the wrong discussion. The discussion you should
be having is "I've filed a few bugs where SELinux didn't magically do the right
thing, how do we fix them and can we make these less likely to occur in future"
If it was a car this discussion ie - "I had a brake problem so I disabled them"
would not be considered sane
fedora-devel-list mailing list
to post comments)