[CLUE-Tech] The NSA's version of Linux...

Kevin Fenzi kevin at scrye.com
Thu Nov 4 13:12:11 MST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Joseph" == Joseph A Nagy, <jnagyjr at joseph-a-nagy-jr.us> writes:

Joseph> What I'm worried about with SELinux is really messing up my
Joseph> workstation/server. I wish I had a viable box to test it on,
Joseph> but my other two computers are kaput.

It's really easy to disable or put it in 'permissive' mode. 

The only thing that gets changed on disk is the extended attributes
where the selinux info is stored. Your data all stays the same. 

You can then boot with 'selinux=0' to disable it entirely. 
You can change between enforcing and permissive (log only) modes on
the fly while the machine is up. 

It's pretty easy to play with. 

kevin
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQFBio0d3imCezTjY0ERAtddAJwKOR/rieh+PZF2EdwS8nIGlGBlfwCfb2Bp
VVO1KStiMNdCpDAEIV0K7wc=
=/V6I
-----END PGP SIGNATURE-----



More information about the clue-tech mailing list