Re: selinux on bookworm

2024-05-18 Thread Antonio Russo
Everyone, First of all thanks for the input. Unfortunately, I have to apologize, because the actual problem was somewhat silly: selinux appears to be preventing only *root* login at the tty, which I neglected to mention. (Also, I neglected to check until now). Regular user logins are fine.

Re: selinux on bookworm

2024-05-17 Thread Tom Dial
On 5/17/24 02:02, George at Clug wrote: Is AppArmor already installed and running?  It is on my system, maybe this would conflict with SeLinux? # aa-status https://wiki.debian.org/AppArmor/HowToUse Disable AppArmor AppArmor is a security mechanism and disabling it is not

Re: selinux on bookworm

2024-05-17 Thread Richard
As you found out yourself, by default it's installed and running. And it's quite likely they would interfere. Still, the question remains. Why do you need SELinux? Do you have an actual need for it? If not, go with what's already there. This will be much easier to set up and handle. Richard Am

Re: selinux on bookworm

2024-05-17 Thread Richard
Is there a specific reason why you want to use SELinux? AppArmor is already there and much easier to configure. SELinux usually causes more issues than AppArmor too as it's not as granular, especially on distros not made specifically for it, at least in my experience. And on Debian, some apps

Re: selinux on bookworm

2024-05-17 Thread George at Clug
Is AppArmor already installed and running?  It is on my system, maybe this would conflict with SeLinux? # aa-status https://wiki.debian.org/AppArmor/HowToUse DISABLE APPARMOR AppArmor is a security mechanism and disabling it is not recommended. If you really need to disable AppArmor on your

selinux on bookworm

2024-05-16 Thread Antonio Russo
Hello, I'm trying to get selinux working on a fresh, gui-free installation of bookworm. I'm not trying to run any servers, nor use standard desktop utilities (yet). I was hoping this setup would be simple enough that selinux would be simple to get going. I'm following [1], which is very