Add new comment
|
Personally, I think it's a little naughty on your part to suggest disabling SE-Linux by default. As was very recently demonstrated, the very source of updates (which are, of course, necessary for a secure system - a static, un-updated system is by definition not a secure system) may be taken off-line by a malicious attack. When that happens, there is little beyond SE-Linux to guarantee a safe and secure system until such time as upstream updates are restored. This can, as has been recently demonstrated, take a not insignificant amount of time. Instead, you should be suggesting that the user retain SE-Linux (as is the default for Fedora, and should require no explicit action on part of the user) and use the SE-Linux Trouble-shoot tool to interact via bugzilla with the Fedora team to adequately handle any edge-cases that may be omitted for very specific scenarios that the user may experience. As many "newbies" read and follow your instructions, you have a moral obligation to keep the uninitiated user as secure as possible.
Reply |



Recent comments
1 day 1 hour ago
1 day 18 hours ago
1 day 20 hours ago
2 days 3 hours ago
2 days 12 hours ago
2 days 20 hours ago
3 days 42 min ago
3 days 4 hours ago
3 days 13 hours ago
3 days 15 hours ago