Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> I’ve never seen one where disabling SELinux wasn’t a normal part of provisioning a server

This is so funny because whenever I suggest Fedora Silverblue to a moderately experienced Linux user who wants a simple distro, the first thing I do is recommend turning SELinux on permissive mode, and I get a bunch of comments hand wringing about how you shouldn't do that.

It's almost like a silent filter working in the background of your OS that doesn't even tell you when it blocks something is a pretty user hostile feature and no one wants to learn how to speak SELinux so they can effectively use it.

Sometimes it seems like Linux people don't want others using it. Even when they belong to evangelist platforms, they like to create huge barriers for entry and then blame new users for not "getting it."



I think all the SELinux denials are logged in Journal and there are good tools to analyze them and possibly turn them to rule changes if necessary.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: