Disabling SELinux's runtime disable

Posted Apr 20, 2023 15:47 UTC (Thu) by mcon147 (subscriber, #56569)
Parent article: Disabling SELinux's runtime disable

While I can see that some use-cases benefit from this, it seems user-hostile to remove the option

Disabling SELinux's runtime disable

Posted Apr 20, 2023 17:39 UTC (Thu) by flussence (guest, #85566) [Link] (2 responses)

As the article points out, this is functionally no different to simply not loading a policy. Anyone who has access to early boot to change this setting can also arrange for that to happen in the same place.

The only people this is "hostile" towards are those who are for some reason a) running a system with SELinux they don't have the authority to turn off at boot, b) know enough about the innards of the system to be dangerous, and c) completely, utterly refuse to do even the most rudimentary RTFMing. And after all the BS surrounding systemd, I think people like that have absolutely earned the hostility.

Disabling SELinux's runtime disable

Posted Apr 22, 2023 7:00 UTC (Sat) by amarao (guest, #87073) [Link] (1 responses)

Aslo, all newcomers, who read docs about fixing odd bugs by whis, will find than older magic no longer works.

Disabling SELinux's runtime disable

Posted Apr 27, 2023 12:03 UTC (Thu) by edeloget (subscriber, #88392) [Link]

> Aslo, all newcomers, who read docs about fixing odd bugs by whis, will find than older magic no longer works.

Forever lost are the shores of Valinor :)