SELinux In Linux 6.4 Removes Run-Time Disabling Support

[HellToupee]

Worst part of selinux is people often don't realize its whats blocking you, audit2allow helps a bit main trouble i find is coming up with correct context settings for some unfamilar app even ones with vendor supported ones often leave us hanging on selinux.

[Paradigm Shifter]

For a gentle introduction, listen to this talk "Security-Enhanced Linux for mere mortals".

"Senior Principal Technical Marketing Manager".

It's like having a security guard who just lets anyone in, but is at least half awake, versus having no security guard at all.

[EphemeralEft]

That being said, this pull request doesn't make it any more difficult to disable. You change a line in a file...

Yeah, I feel like someone is missing something. Either I/we are misunderstanding the concerns by everyone complaining about this, or people don’t realize how dead easy it is, or people are so petrified of editing a config file that they have bigger concerns than SELinux…

[kcrudup]

Isn't SELinux mostly for devices (i.e., "not the end-user desktop") anyway?