undefined | Better HN

0 pointsmrmondo11y ago0 comments

That's interesting indeed - I just don't see how a modern security conscious distribution can be considered releasable without SELinux working.

We were using them just fine in a pre-prod (waiting for Jessie to be released) environment. We weren't using GPG but experienced no other issues.

Right now, to get around the problem we have ported Fedora's policies across. I'm unsure if these two bugs exist when using Fedora's policies but I'd say they would be.

0 comments

2 comments · 2 top-level

vbernat11y ago

SELinux is not a release goal. It's possible to advocate for new release goals (for example, it is likely that reproducible build will be a release goal for the next release) but this means that some people have to volunteer to do the work.

I don't know enough SELinux to comment on the technical details.

macattacke11y ago

can be considered releasable without SELinux

MAC is a JOKE. feds only wrote SELinux because largely they're required to use MAC. there are far better things to worry about than MAC unless youre getting paid triple digits per hour. windows had MAC forever, look how no ones uses it. i could go on.

j / k navigate · click thread line to collapse