Re: [gentoo-user] NSA SELinux kernel support

2015-01-06 Thread Alec Ten Harmsel
On 01/04/2015 09:47 AM, Sid S wrote: SELinux is the only one I've had a bit of experience with - I run CentOS (SELinux is enabled by default) for some personal-use-only services that I want to run without dealing with Gentoo. My first step in a CentOS install is to disable SELinux (and the

Re: [gentoo-user] NSA SELinux kernel support

2015-01-06 Thread Sid S
...until it doesn't, and then what? The comment was slightly off-topic and mainly pointed towards his decision to disable SELinux on a distribution which had enabled it by default. On Gentoo, if you enable SELinux, see all of the AVCs and decide to nope right out of there, you are making an

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Sid S
I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. There is no harm, but if you were interested a lot of packages come with policies by default. Currently there is no support for SELinux in Gentoo for the vast majority of desktop

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Alec Ten Harmsel
On 01/04/2015 09:47 AM, Sid S wrote: SELinux is the only one I've had a bit of experience with - I run CentOS (SELinux is enabled by default) for some personal-use-only services that I want to run without dealing with Gentoo. My first step in a CentOS install is to disable SELinux (and the

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Erik Mackdanz
Sid S r03...@gmail.com writes: your distribution probably comes with policies for everything you want to install, anyway... ...until it doesn't, and then what? I attempted a full conversion a few months back, and was ready to make some commitment to getting SELinux to work on my personal

Re: [gentoo-user] NSA SELinux kernel support

2015-01-02 Thread Alexander Kapshuk
On Fri, Jan 2, 2015 at 10:03 AM, Marc Stürmer m...@marc-stuermer.de wrote: Am 01.01.2015 um 18:01 schrieb Alexander Kapshuk: I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. It depends on your usage case (desktop or server) and

Re: [gentoo-user] NSA SELinux kernel support

2015-01-02 Thread Marc Stürmer
Am 01.01.2015 um 18:01 schrieb Alexander Kapshuk: I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. It depends on your usage case (desktop or server) and grade of personal paranoia. I know a few administrators how think that

Re: [gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alexander Kapshuk
On Thu, Jan 1, 2015 at 7:25 PM, Alec Ten Harmsel a...@alectenharmsel.com wrote: Context for my replies - I only use Gentoo in a personal setting. On 01/01/2015 12:01 PM, Alexander Kapshuk wrote: I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources

Re: [gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alec Ten Harmsel
Context for my replies - I only use Gentoo in a personal setting. On 01/01/2015 12:01 PM, Alexander Kapshuk wrote: I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. I've never had SELinux enabled in my gentoo kernels. The kernel

[gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alexander Kapshuk
I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. The kernel config help for the NSA SELinux options suggests that having them enabled is optional. If I understand it correctly, having these options on in the kernel config alone does