On Wed, Jul 19, 2006 at 01:23:55PM -0500, Michael Edwards wrote: > There is also a somewhate subtle option in the installer to just not > turn it on in the first place. Its in the firewall set up section.
Nope. The firewall set up section is (in recent Fedora Core distros) part of the post-install setup. SELinux is "on in the first place"; that is, as soon as you boot at the end of the install. Only if you can make it far enough into the post-install setup to get to the place where you are asked whether you want SELinux, can you turn it off. Having SELinux on in the first place, right from the very first boot, until/unless you subsequently turn it off, is the secure way of doing things. Having it off in the first place, until/unless the user turned it on, could leave a window of opportunity for any attacks over the network. Note that getting to the place where you can turn off SELinux, in the post-install setup, is only an issue if you set up your file systems using ReiserFS (or JFS, I'm told). > On 7/19/06, Ted Powell <[EMAIL PROTECTED]> wrote: > > [...] > > It seems that ReiserFS, SELinux, FC5, don't get on well together, so > > when doing an install I tell GRUB (via the Advanced Options window) > > to provide the kernel param "selinux=0". Otherwise, on the first boot > > after the install, I can't get far enough through the post-install setup > > to say I don't want SELinux. -- Ted Powell <[EMAIL PROTECTED]> http://psg.com/~ted/ "If you don't look, you don't know." Dr. Sam Ting, Nobel laureate experimental physicist. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Oscar-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/oscar-devel
