News for hackers. Stuff that matters.
Re:SELinux is unmanageable; just turn it off if it gets in y... by tremon on Wednesday April 27, 2022 @10:30AM (#31180350)
The article author is Testing in PROD

when you acknowledge this, then continuing your advice with

  setenforce 0
is a spectacularly bad idea. You can make individual domains permissive using

  semanage permissive -a ${context}
and then run the failing test using only that permissive domain.

Of course, the story becomes much more complicated if the failing test requires type transitions -- but blanket advising people to put an entire PROD system in permissive mode is not a good idea.

Re:SELinux is unmanageable; just turn it off if it gets in y... by egberts1 on Wednesday April 27, 2022 @03:07PM (#31184386)
agreed on all points. sometime the problem is so elusive that its flipping it to `0` time!