major.io words of wisdom from a systems engineer

Seriously, stop disabling SELinux

After many discussions with fellow Linux users, I’ve come to realize that most seem to disable SELinux rather than understand why it’s denying access. In an effort to turn the tide, I’ve created a new site as a public service to SELinux cowards everywhere: stopdisablingselinux.com.

Here are some relatively useful SELinux posts from the blog:


Edit: The goal of the post was to poke some fun at system administrators who disable SELinux immediately without learning how it works or why they’re seeing certain operations being denied. Obviously, if your particular workload or demands don’t allow for the use of SELinux, then I’m going to be the last person to encourage you to use it. Many system administrators have found that it doesn’t provide a good ratio of work required to benefit gained, which I totally understand.