Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Kill switch is there

Posted Jul 10, 2008 6:57 UTC (Thu) by khim (subscriber, #9252)
In reply to: SELinux and Fedora by jmorris42
Parent article: SELinux and Fedora

You can disable SELinux for postgresql or mysql or any other program - that's your "airbag kill switch for the passenger seat". The installer option is more like "do you want to remove all airbags from the car - forever?" and I know no automakers who offer such an option.

(Log in to post comments)

Posted Jul 10, 2008 14:45 UTC (Thu) by jebba (✭ supporter ✭, #4439) [Link]

> "Shall I enable the airbag ?"

If it prevents me from putting the car in gear, no thx.

Kill switch is there

Posted Jul 10, 2008 17:52 UTC (Thu) by JoeBuck (subscriber, #2330) [Link]

I've been running my machines at home with SELinux enabled for years. I've occasionally had a problem, but overall it's gone rather smoothly. About a year ago I needed to disable SELinux for about a day until the Fedora folks fixed a problem. I've learned enough about how the labels work that I can fix simple issues.

It doesn't prevent you from putting your car in gear.

And it's still easy to turn off from the command line. Users who are going to stick to the GUI can run with the policies Fedora ships, and they work.