Re: SELinux on Fedora 17 - troubles, troubles, troubles, ...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

On Thu, Jul 19, 2012 at 12:24 PM, Mateusz Marzantowicz
<mmarzantowicz@xxxxxxxxxxx> wrote:
> Why is using of SELinux on Fedora (I don't have experience with other
> distros) so painful from a regular user perspective?
>
> I'm talking about situation in which after installing stock packages and
> "just running" applications I'm spending more time with SELInux Alert
> Browser than any other system management utility.
>
> You'd probably say that it's my fault, that I messed up with selinux
> settings (yes, I confess, I've enabled samba sharing on some of my
> directories under home but I've done this based on official Wiki) but
> actually I only followed instructions from alert browser. I've applied
> custom policies for one or two files that I then removed after one or
> two hours.
>
> I think that right now my system is as secure as with selinux disabled
> because of all that modification that I've made. I'm not an idiot but I
> really can't track all security policies that are active in my desktop
> system used for daily work.
>
> Do I really need to became security expert specialized in SELInux to use
> my system? I started reading about selinux design and configuration but
> I think it's a waste of time. My current selinux problem is caused by
> systemd-tmpfiles trying to cleanup my /tmp dir where I copied some files
> from home directory to play with and ... left them for automatic
> cleanup. Solution is obvious - remove files form /tmp manually but then
> autoremover mechanism provided by Fedora is redundant.
>
> Is there a chance that someday users will use selinux without even
> noticing it's installed?

You do understand that ranting (as opposed to reporting bugs / sending
fixes / etc) will get you nowhere, right?

- Gilboa
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org



Photo 4 Less

[Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Find Someone Special]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

Add to Google Powered by Linux