3 ms·
Pointless warning spam drowns out real issues in the logs all the time. You cannot expect an end user to fix chromium based applications or stop using them, so
by josefx 2y ago
Pointless warning spam drowns out real issues in the logs all the time. You cannot expect an end user to fix chromium based applications or stop using them, so all you end up doing is making the system less usable and less secure.
- mroche 2y agoThere are two components to SELinux alerting mechanisms, both of which are documented. For GUI notifications open the sealert app and disable alerts. For journal/syslog reports disable the setroubleshoot daemon dispatch plugin for auditd: sed -i 's/active.=.yes/active = no/' /etc/audit/plugins.d/sedispatch.conf service auditd restart You can also uninstall the setroublshoot-server package completely, and all AVC denials will continue be reported separately outside of the journal.
- freedomben 2y agoSure, but even disabling SE Linux all together seems like a lighter and more sensible solution to me than changing distros. I doubt those applications are suddenly going to stop doing the things deemed insecure because they're running on a different distro, so even just allowing those actions seems far easier and still better off than changing distros. I generally try to fix all SE Linux issues as they come up, but when I just need something working and don't have time to muck with it, I've disabled it in the past. Yes, I know it makes Dan cry, but having people screaming for something that they need immediately to do their jobs makes me cry.