News for hackers. Stuff that matters.

A comment on Stop Disabling SELinux: A Real-World Guide. Parent comment

Re:Stop Disabling SELinux: A Real-World Guide by jeffgus on Thursday February 02, 2017 @03:30PM (#13554351)
Wouldn't it have been easier to check the audit.log? Pump out the contents to audit2allow and you will have a nice new config that would allow your setup. Heck, it would even tell you if there is already a boolean for that config.

I really don't see any reason to disable SELinux. Maybe back in RHEL5 days, but not since then. Just educate yourself on some tools. It really isn't that hard.

[ Parent | on HN ]
Re:Stop Disabling SELinux: A Real-World Guide by joseph on Thursday February 02, 2017 @07:37PM (#13556547)
Sure, it would have been easier for me to check the audit log, however the idea that it was an issue with SELinux didn't even cross my mind until I used strace. The vast majority of Linux systems I work on do not have it enabled.

You may not see a reason to disable SELinux, but not all Linux systems are RHEL, and don't have it enabled to begin with. I personally would not enable it on a system that did not design for it as a default.

[ Parent | on HN ]