Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 10:52 AM, Lamar Owen wrote: > On Monday, April 02, 2012 11:27:54 AM John Doe wrote: >> ...self-compiled... > > As Jamie Hyneman would say, "well, there's your problem." Isn't most of the point of running servers to provide a unique service? -- Les Mikesell lesmike

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Ned Slider wrote: > On 02/04/12 15:10, Lamar Owen wrote: >> On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: >>> Another statistic I'd like to see is how much admin time this costs on >>> the average to learn and implement. >> >> No more than proper firewalling techniques cost, really. >>

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 10:34:58 AM Les Mikesell wrote: > So at least another grumpy, overworked full-time administrator for a > typical company? Perhaps. It depends upon how willing the existing admins are to learn something new, and on how overworked they are. I'm as overworked as anyone; i

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 11:27:54 AM John Doe wrote: > ...self-compiled... As Jamie Hyneman would say, "well, there's your problem." Having said that, I run Plone on a few sites, and the only way to run Plone reliably on CentOS is to use the Plone-distributed unified installer, which compiles

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Ned Slider
On 02/04/12 15:10, Lamar Owen wrote: > On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: >> Another statistic I'd like to see is how much admin time this costs on >> the average to learn and implement. > > No more than proper firewalling techniques cost, really. > >> Has anyone really measu

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread John Doe
From: Lamar Owen > On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: >> Another statistic I'd like to see is how much admin time this costs on >> the average to learn and implement.  > No more than proper firewalling techniques cost, really. Depends... Takes me 1mn to open a www port

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 9:10 AM, Lamar Owen wrote: > On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: >> Another statistic I'd like to see is how much admin time this costs on >> the average to learn and implement. > > No more than proper firewalling techniques cost, really. > So at least

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: > Another statistic I'd like to see is how much admin time this costs on > the average to learn and implement. No more than proper firewalling techniques cost, really. > Has anyone really measured this? Probably not. > Are there tra

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Les Mikesell wrote: > On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes wrote: >>> >>>     Just wondering if there is any statiscs report of selinxu usages in >>> production environment? I know some still turn it off. >> >> If you have machines purposely serving things to the masses on the >> Internet

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes wrote: >> >>     Just wondering if there is any statiscs report of selinxu usages in >> production environment? I know some still turn it off. > > If you have machines purposely serving things to the masses on the > Internet, you should take the time t

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Johnny Hughes
On 03/31/2012 10:31 PM, Min Wang wrote: > hi > > Just wondering if there is any statiscs report of selinxu usages in > production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the Internet, you should take the time to make SELinux w

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread John R Pierce
On 04/01/12 10:45 PM, alikhan damirov wrote: > I don't know about statistics, but selinux have log's. > Watch here: http://wiki.centos.org/HowTos/SELinux > By default SELinux log messages are written to */var/log/audit/audit.log* I believe the OP was asking about the statistics of how many CentOS

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread alikhan damirov
I don't know about statistics, but selinux have log's. Watch here: http://wiki.centos.org/HowTos/SELinux By default SELinux log messages are written to */var/log/audit/audit.log* On 2 April 2012 08:42, James A. Peltier wrote: > On almost all servers that I have SELinux is turned on in enforcing

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread James A. Peltier
On almost all servers that I have SELinux is turned on in enforcing more. For desktops I don't have it turned on at all. I work in a research environment and managing SELinux in the context of research is very difficult. I can think of one *maybe* two servers that don't have it in enforcing b

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread Bob Hoffman
On 4/1/2012 8:24 PM, Mark LaPierre wrote: > On 03/31/2012 11:31 PM, Min Wang wrote: >> hi >> >> Just wondering if there is any statiscs report of selinxu usages in >> production environment? I know some still turn it off. >> >> >> >> thanks. >> >> min >> __

Re: [CentOS] selinux on/off percentage

2012-04-01 Thread Mark LaPierre
On 03/31/2012 11:31 PM, Min Wang wrote: > hi > > Just wondering if there is any statiscs report of selinxu usages in > production environment? I know some still turn it off. > > > > thanks. > > min > ___ > CentOS mailing list > CentOS@centos.org > ht

[CentOS] selinux on/off percentage

2012-03-31 Thread Min Wang
hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. thanks. min ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos