Re: [gentoo-user] NSA SELinux kernel support

2015-01-06 Thread Alec Ten Harmsel
On 01/04/2015 09:47 AM, Sid S wrote: > >> SELinux is the only one I've had a bit of experience with - I run CentOS >> (SELinux is enabled by default) for some personal-use-only services that >> I want to run without dealing with Gentoo. My first step in a CentOS >> install is to disable SELinux (a

Re: [gentoo-user] NSA SELinux kernel support

2015-01-06 Thread Sid S
> ...until it doesn't, and then what? The comment was slightly off-topic and mainly pointed towards his decision to disable SELinux on a distribution which had enabled it by default. On Gentoo, if you enable SELinux, see all of the AVCs and decide to nope right out of there, you are making an info

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Erik Mackdanz
Sid S writes: > your distribution probably comes > with policies for everything you want to install, anyway... ...until it doesn't, and then what? I attempted a full conversion a few months back, and was ready to make some commitment to getting SELinux to work on my personal laptop. I got as f

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Alec Ten Harmsel
On 01/04/2015 09:47 AM, Sid S wrote: > >> SELinux is the only one I've had a bit of experience with - I run CentOS >> (SELinux is enabled by default) for some personal-use-only services that >> I want to run without dealing with Gentoo. My first step in a CentOS >> install is to disable SELinux (a

Re: [gentoo-user] NSA SELinux kernel support

2015-01-04 Thread Sid S
> I was wondering if there was any harm in disabling the NSA SELinux support > in my gentoo-sources based kernel. There is no harm, but if you were interested a lot of packages come with policies by default. Currently there is no support for SELinux in Gentoo for the vast majority of desktop appli

Re: [gentoo-user] NSA SELinux kernel support

2015-01-02 Thread Alexander Kapshuk
On Fri, Jan 2, 2015 at 10:03 AM, Marc Stürmer wrote: > Am 01.01.2015 um 18:01 schrieb Alexander Kapshuk: > > I was wondering if there was any harm in disabling the NSA SELinux >> support in my gentoo-sources based kernel. >> > > It depends on your usage case (desktop or server) and grade of pers

Re: [gentoo-user] NSA SELinux kernel support

2015-01-02 Thread Marc Stürmer
Am 01.01.2015 um 18:01 schrieb Alexander Kapshuk: I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. It depends on your usage case (desktop or server) and grade of personal paranoia. I know a few administrators how think that enabli

Re: [gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alexander Kapshuk
On Thu, Jan 1, 2015 at 7:25 PM, Alec Ten Harmsel wrote: > Context for my replies - I only use Gentoo in a personal setting. > > On 01/01/2015 12:01 PM, Alexander Kapshuk wrote: > > I was wondering if there was any harm in disabling the NSA SELinux > > support in my gentoo-sources based kernel. >

Re: [gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alec Ten Harmsel
Context for my replies - I only use Gentoo in a personal setting. On 01/01/2015 12:01 PM, Alexander Kapshuk wrote: > I was wondering if there was any harm in disabling the NSA SELinux > support in my gentoo-sources based kernel. I've never had SELinux enabled in my gentoo kernels. > > The kernel

[gentoo-user] NSA SELinux kernel support

2015-01-01 Thread Alexander Kapshuk
I was wondering if there was any harm in disabling the NSA SELinux support in my gentoo-sources based kernel. The kernel config help for the NSA SELinux options suggests that having them enabled is optional. If I understand it correctly, having these options on in the kernel config alone does not