[$] Removing run-time disabling for SELinux in Fedora
Disabling SELinuxis, perhaps sadly in some ways, a time-honored tradition for users of Fedora, RHEL, and other distributions that feature thesecurity mechanism. Over the years, SELinux has gotten easier to toleratedue to the hard work of its developers and the distributions, but there arestill third-party packages that recommend or require disabling SELinux inorder to function. Up until fairly recently, the kernel has supporteddisabling SELinux at run time, but that mechanism has been deprecated-inpart due to another kernel security feature. Now Fedora is planningto eliminate the ability to disable SELinux at run time in Fedora 34, which sparkedsome discussion in its devel mailing list.