Re: [xcat-user] SELinux - why not?
Do you know if this is the only issue? On Fri, Dec 1, 2017 at 11:07 AM, Vinícius Ferrãowrote: > AFAIK, it cannot generate BIND files correctly: > > [root@cluster ~]# makedns -n > > Warning: SELINUX is not disabled. The makedns command will not be able to > generate a complete DNS setup. Disable SELINUX and run the command again. > > Sent from my iPhone > > On 30 Nov 2017, at 15:31, Kevin Keane wrote: > > As far as I understand it, the recommendation is to disable SELinux with > xCAT. There actually is a warning built into makedns about this. > > As a professional paranoid, I always prefer to have as many of the > security mechanisms as possible running, and I want to understand exactly > why a particular mechanism is not recommended. > > In xCAT, what, specifically, does SELinux interfere with? > > Thanks! > > -- > > ___ > Kevin Keane | Systems Architect | University of San Diego ITS | > kke...@sandiego.edu > Maher Hall, 192 |5998 Alcalá Park | San Diego, CA 92110-2492 | > 619.260.6859 <%28619%29%20260-2298> > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > > ___ > xCAT-user mailing list > xCAT-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/xcat-user > > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > xCAT-user mailing list > xCAT-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/xcat-user > > -- ___ Kevin Keane | Systems Architect | University of San Diego ITS | kke...@sandiego.edu Maher Hall, 192 |5998 Alcalá Park | San Diego, CA 92110-2492 | 619.260.6859 <%28619%29%20260-2298> -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user
Re: [xcat-user] SELinux - why not?
AFAIK, it cannot generate BIND files correctly: [root@cluster ~]# makedns -n Warning: SELINUX is not disabled. The makedns command will not be able to generate a complete DNS setup. Disable SELINUX and run the command again. Sent from my iPhone > On 30 Nov 2017, at 15:31, Kevin Keanewrote: > > As far as I understand it, the recommendation is to disable SELinux with > xCAT. There actually is a warning built into makedns about this. > > As a professional paranoid, I always prefer to have as many of the security > mechanisms as possible running, and I want to understand exactly why a > particular mechanism is not recommended. > > In xCAT, what, specifically, does SELinux interfere with? > > Thanks! > > -- > ___ > Kevin Keane | Systems Architect | University of San Diego ITS | > kke...@sandiego.edu > Maher Hall, 192 |5998 Alcalá Park | San Diego, CA 92110-2492 | 619.260.6859 > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > xCAT-user mailing list > xCAT-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/xcat-user -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user
[xcat-user] SELinux - why not?
As far as I understand it, the recommendation is to disable SELinux with xCAT. There actually is a warning built into makedns about this. As a professional paranoid, I always prefer to have as many of the security mechanisms as possible running, and I want to understand exactly why a particular mechanism is not recommended. In xCAT, what, specifically, does SELinux interfere with? Thanks! -- ___ Kevin Keane | Systems Architect | University of San Diego ITS | kke...@sandiego.edu Maher Hall, 192 |5998 Alcalá Park | San Diego, CA 92110-2492 | 619.260.6859 <%28619%29%20260-2298> -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user