4 ms·
This is one of those technologies that people shouldn't be using if they didn't take the time to learn it. It's not like say, nginx or a linux distro, where yo
by ruthmarx 2y ago
This is one of those technologies that people shouldn't be using if they didn't take the time to learn it.
It's not like say, nginx or a linux distro, where you don't need to know the ins and outs to get it up and running.
- DrillShopper 2y agoThe problem is that when people don't know how to use it and instead turn it off they're immediately deluged from every side with pathetic nerds screaming that YOU DONT HAVE TO TURN IT OFF ANYMORE RUN THIS ARCANE SEQUENCE OF COMMADS THAT YOU DONT UNDERSTAND AS ROOT AND THAT WILL FIX THE ONE ISSUE YOU HAVE without understanding that not every computer system needs to be locked as tight as a server that's being shared with a bunch of untrusted users who are running god knows what.
- ruthmarx 2y agoWhy use RHEL if you don't want one of the main advantages it offers? There have been numerous exploits that RHEL has been protected against because of SELinux and their policies. Sure, not all servers need to be secured, but why use RHEL then? Why not use Debian or some RH fork that doesn't have it on by default, or even SuSE? The people who disable it out of convenience are generally bad admins, and generally being lazy and/or incompetent.
- DrillShopper 2y agoThank goodness you're here to tell them that. It would really be a shame if they did threat modeling and determined it was not necessary for their use case. That would make you look goofy and kind of a jerk.
- ruthmarx 2y agoHeh. Yeah, people mostly disable SELinux because they did threat modeling and determined it made sense, and don't just switch it off due to laziness or incompetence. I think claiming that is a pretty goofy argument, personally.