On Dec 24, 2007 2:16 AM, mabshoff
<[EMAIL PROTECTED]> wrote:
>
>
>
> On Dec 24, 4:38 am, William Stein <[EMAIL PROTECTED]> wrote:
> > - William
> >
> > (Sent from my iPhone.)
> >
> > Begin forwarded message:
> >
> > > From: David Nordquest
> > > Date: December 23, 2007 8:30:19 PM MST
> > > To: [EMAIL PROTECTED]
> > > Subject: SELinux Problems
> >
> > > On my CENTOS 5 system, I found the SELinux errors can be avoided by
> > > setting SELinux to "permissive" rather than "enforced."  "Disabled"
> > > was not necessary.
>
> Sure, but the price you pay in that case is an ever increasing size of
> various SELinux related log files. permissive is usually the setting
> to use if you want to track down some issues and fix them.

You're right.  The author of the email came to the same conclusion once
he read the docs:
"A correction to my earlier email.  Putting SELinux in permissive mode
is a form of disabling.
Here's the difference as described by an FAQ at
http://www.crypt.gen.nz/selinux/disable_selinux.html:

    * Permissive - switch the SELinux kernel into a mode where every
operation is allowed. Operations that would be denied are allowed and
a message is logged identifying that it would be denied. The mechanism
that defines labels for files which are being created/changed is still
active.
    * Disabled - SELinux is completely switched off in the kernel.
This allows all operations to be permitted, and also disables the
process which decides what to label files & processes with.

Best,
Dave"


> >> Lots of software seems to be affected by the new
> > > tighted SELinux settings, including Mathematica.
>
> Well, that should just as easily be fixable via proper labeling as
> Sage.
>

Y

--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to sage-devel@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/sage-devel
URLs: http://sage.scipy.org/sage/ and http://modular.math.washington.edu/sage/
-~----------~----~----~----~------~----~------~--~---

Reply via email to