Article 58GCM [$] Removing run-time disabling for SELinux in Fedora

[$] Removing run-time disabling for SELinux in Fedora

by
jake
from LWN.net on (#58GCM)
Disabling SELinuxis, perhaps sadly in some ways, a time-honored tradition for users of Fedora, RHEL, and other distributions that feature thesecurity mechanism. Over the years, SELinux has gotten easier to toleratedue to the hard work of its developers and the distributions, but there arestill third-party packages that recommend or require disabling SELinux inorder to function. Up until fairly recently, the kernel has supporteddisabling SELinux at run time, but that mechanism has been deprecated-inpart due to another kernel security feature. Now Fedora is planningto eliminate the ability to disable SELinux at run time in Fedora 34, which sparkedsome discussion in its devel mailing list.
External Content
Source RSS or Atom Feed
Feed Location http://lwn.net/headlines/rss
Feed Title LWN.net
Feed Link https://lwn.net/
Reply 0 comments