Re: [CentOS] selinux on/off percentage

2012-04-02 Thread John R Pierce
On 04/01/12 10:45 PM, alikhan damirov wrote: I don't know about statistics, but selinux have log's. Watch here: http://wiki.centos.org/HowTos/SELinux By default SELinux log messages are written to */var/log/audit/audit.log* I believe the OP was asking about the statistics of how many CentOS

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Johnny Hughes
On 03/31/2012 10:31 PM, Min Wang wrote: hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the Internet, you should take the time to make SELinux work

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes joh...@centos.org wrote:     Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the Internet, you should take

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Les Mikesell wrote: On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes joh...@centos.org wrote:     Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone really measured this? Probably not. Are there

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 9:10 AM, Lamar Owen lo...@pari.edu wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. So

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread John Doe
From: Lamar Owen lo...@pari.edu On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement.  No more than proper firewalling techniques cost, really. Depends... Takes me 1mn to open a

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Ned Slider
On 02/04/12 15:10, Lamar Owen wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone really measured this?

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 11:27:54 AM John Doe wrote: ...self-compiled... As Jamie Hyneman would say, well, there's your problem. Having said that, I run Plone on a few sites, and the only way to run Plone reliably on CentOS is to use the Plone-distributed unified installer, which compiles

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 10:34:58 AM Les Mikesell wrote: So at least another grumpy, overworked full-time administrator for a typical company? Perhaps. It depends upon how willing the existing admins are to learn something new, and on how overworked they are. I'm as overworked as anyone; it

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Ned Slider wrote: On 02/04/12 15:10, Lamar Owen wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 10:52 AM, Lamar Owen lo...@pari.edu wrote: On Monday, April 02, 2012 11:27:54 AM John Doe wrote: ...self-compiled... As Jamie Hyneman would say, well, there's your problem. Isn't most of the point of running servers to provide a unique service? -- Les Mikesell

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread Mark LaPierre
On 03/31/2012 11:31 PM, Min Wang wrote: hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. thanks. min ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread Bob Hoffman
On 4/1/2012 8:24 PM, Mark LaPierre wrote: On 03/31/2012 11:31 PM, Min Wang wrote: hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. thanks. min ___ CentOS

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread James A. Peltier
On almost all servers that I have SELinux is turned on in enforcing more. For desktops I don't have it turned on at all. I work in a research environment and managing SELinux in the context of research is very difficult. I can think of one *maybe* two servers that don't have it in enforcing

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread alikhan damirov
I don't know about statistics, but selinux have log's. Watch here: http://wiki.centos.org/HowTos/SELinux By default SELinux log messages are written to */var/log/audit/audit.log* On 2 April 2012 08:42, James A. Peltier jpelt...@sfu.ca wrote: On almost all servers that I have SELinux is turned

[CentOS] selinux on/off percentage

2012-03-31 Thread Min Wang
hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. thanks. min ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos