Re: Disable SELinux?

On Thu, 21 Apr 2005, Ed Wilts wrote:

> On Thu, Apr 21, 2005 at 11:25:56AM +0200, Remco Barendse wrote:
>> I installed a production box and selected to use SELinux.
>>
>> Because of all the crap it's giving me (I'm not even able to setup dhcp
>> grrr...) I want to disable it completely.
>
> I believe you're taking the wrong approach.  Because you don't know how
> to use the tool properly doesn't mean you should throw it away.  SELinux
> offers a lot of additional security and it's to your advantage if you
> know how to manage it.
>
> Red Hat has published a manual dedicated to SELinux.
>
> http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/
>
> You could find chapter 4 interesting - the example is dhcpd.

I do believe you are right, however..... One of my production boxes 
running Gentoo busted and I needed to re-install it. Gentoo was giving me 
all sorts of headaches (and it was the last box running Gentoo anyway) so 
I just installed the RHEL4 rebuild. After 3 hours browsing trying to even 
get DHCP working (it didn't accept my dhcpd.conf) I preffered getting 
things up and running again instead of stalling the process further

(Yes, the RedHat manual does state that you shouldn't try deplying it on a 
production box right away) :)

I'm now up and running and when I figure out how to properly do SELinux I 
will enable it later.

BTW, I also installed IMAP but cannot find any way to activate IMAP or 
POP, not in ntsysv nor in xinetd.d

Is it in a `hidden' place or is it that they just didn't include the 
xinetd.d file for security reasons?