Add new comment
|
Personally, I think it's a little naughty on your part to suggest disabling SE-Linux by default. As was very recently demonstrated, the very source of updates (which are, of course, necessary for a secure system - a static, un-updated system is by definition not a secure system) may be taken off-line by a malicious attack. When that happens, there is little beyond SE-Linux to guarantee a safe and secure system until such time as upstream updates are restored. This can, as has been recently demonstrated, take a not insignificant amount of time. Instead, you should be suggesting that the user retain SE-Linux (as is the default for Fedora, and should require no explicit action on part of the user) and use the SE-Linux Trouble-shoot tool to interact via bugzilla with the Fedora team to adequately handle any edge-cases that may be omitted for very specific scenarios that the user may experience. As many "newbies" read and follow your instructions, you have a moral obligation to keep the uninitiated user as secure as possible.
Reply |





Recent comments
5 hours 24 min ago
6 hours 9 min ago
7 hours 59 min ago
8 hours 10 min ago
10 hours 10 min ago
19 hours 25 min ago
19 hours 54 min ago
21 hours 36 min ago
23 hours 36 min ago
1 day 11 min ago