Re: Request to re-add option to disable SELinux
[Posted July 9, 2008 by jake]
| From: |
| Alan Cox <alan-AT-redhat.com> |
| To: |
| Development discussions related to Fedora <fedora-devel-list-AT-redhat.com> |
| Subject: |
| Re: Request to re-add option to disable SELinux |
| Date: |
| Wed, 2 Jul 2008 17:16:10 -0400 |
| Message-ID: |
| <20080702211610.GC27060@devserv.devel.redhat.com> |
| Archive-link: |
| Article,
Thread
|
On Wed, Jul 02, 2008 at 04:46:35PM -0400, Jon Masters wrote:
> If it were really black and white like that, then I'd have to argue for
> SELinux to be disabled by default on new Fedora installs and have users
> go into the system config dialog to turn it back on. After all, if
> you're going to use the following argument:
"This car has brakes, enable them ?"
"Would you like the seatbelts to work ?"
"Shall I enable the airbag ?"
> Then consider, those who know what SELinux is are more likely to know
> about that dialog, and therefore more likely to turn it on. If you don't
> like that, then I suggest giving thought to re-instating the option :)
One of the Gnome talks summed this up nicely long ago - how do most users
see dialogue boxes like that - the answer is as random noise you hit the yes
button too.
SELinux should be disablable is the wrong discussion. The discussion you should
be having is "I've filed a few bugs where SELinux didn't magically do the right
thing, how do we fix them and can we make these less likely to occur in future"
If it was a car this discussion ie - "I had a brake problem so I disabled them"
would not be considered sane
Alan
--
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
(
Log in to post comments)