LWN.net Logo

Re: Request to re-add option to disable SELinux

From:  Alan Cox <alan-AT-redhat.com>
To:  Development discussions related to Fedora <fedora-devel-list-AT-redhat.com>
Subject:  Re: Request to re-add option to disable SELinux
Date:  Wed, 2 Jul 2008 17:16:10 -0400
Message-ID:  <20080702211610.GC27060@devserv.devel.redhat.com>
Archive-link:  Article, Thread

On Wed, Jul 02, 2008 at 04:46:35PM -0400, Jon Masters wrote:
> If it were really black and white like that, then I'd have to argue for
> SELinux to be disabled by default on new Fedora installs and have users
> go into the system config dialog to turn it back on. After all, if
> you're going to use the following argument:

"This car has brakes, enable them ?"
"Would you like the seatbelts to work ?"
"Shall I enable the airbag ?"

> Then consider, those who know what SELinux is are more likely to know
> about that dialog, and therefore more likely to turn it on. If you don't
> like that, then I suggest giving thought to re-instating the option :)

One of the Gnome talks summed this up nicely long ago - how do most users
see dialogue boxes like that - the answer is as random noise you hit the yes
button too.

SELinux should be disablable is the wrong discussion. The discussion you should
be having is "I've filed a few bugs where SELinux didn't magically do the right
thing, how do we fix them and can we make these less likely to occur in future"

If it was a car this discussion ie - "I had a brake problem so I disabled them"
would not be considered sane

Alan

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list



(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds