Hi all, regarding the topic of disabling SELinux altogether to speed-up cluster setup times. Pablo writes:
> I have also modified my playbooks to disable selinux. Personally I have > found selinux to give more headache than advantages and for a temporary > cluster I find more convenient to disable it. I would also suggest that the > default behavior in elasticluster could be to keep selinux disabled. I have been a bit wary of doing this: I am not using CentOS/RHEL and I know very little about the whole SELinux management in RHEL/CentOS. I have the impression people tend to just disable it, but then RH has put a lot of effort in tightening SELinux over a number of RHEL releases (and they dedicate a large chapter of their product manual to it) that it seems wasteful to just disable the security framework altogether. OTOH, I am (again) no RHEL/CentOS sysadmin so what do people using RHEL/CentOS do? Is it important to keep SELinux, or do you just set it to non-enforcing mode as the first thing after installation? :-) I have opened bug #480 for tracking discussion on this issue: please feel free to state your comments and reactions there: https://github.com/gc3-uzh-ch/elasticluster/issues/480 Ciao, R -- Riccardo Murri / Email: [email protected] / Tel.: +41 77 458 98 32 -- You received this message because you are subscribed to the Google Groups "elasticluster" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
