Re: Disable SELinux?

On Thu, 2005-04-21 at 17:17 +0200, Remco Barendse wrote:
> On Thu, 21 Apr 2005, Ed Wilts wrote:
> 
> > On Thu, Apr 21, 2005 at 11:25:56AM +0200, Remco Barendse wrote:
> >> I installed a production box and selected to use SELinux.
> >>
> >> Because of all the crap it's giving me (I'm not even able to setup dhcp
> >> grrr...) I want to disable it completely.
> >
> > I believe you're taking the wrong approach.  Because you don't know how
> > to use the tool properly doesn't mean you should throw it away.  SELinux
> > offers a lot of additional security and it's to your advantage if you
> > know how to manage it.
> >
> > Red Hat has published a manual dedicated to SELinux.
> >
> > http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/
> >
> > You could find chapter 4 interesting - the example is dhcpd.
> 
> I do believe you are right, however..... One of my production boxes 
> running Gentoo busted and I needed to re-install it. Gentoo was giving me 
> all sorts of headaches (and it was the last box running Gentoo anyway) so 
> I just installed the RHEL4 rebuild. After 3 hours browsing trying to even 
> get DHCP working (it didn't accept my dhcpd.conf) I preffered getting 
> things up and running again instead of stalling the process further
> 
> (Yes, the RedHat manual does state that you shouldn't try deplying it on a 
> production box right away) :)
> 
> I'm now up and running and when I figure out how to properly do SELinux I 
> will enable it later.
> 
> BTW, I also installed IMAP but cannot find any way to activate IMAP or 
> POP, not in ntsysv nor in xinetd.d
> 
> Is it in a `hidden' place or is it that they just didn't include the 
> xinetd.d file for security reasons?

dovecot or cyrus-imap are included and provide pop/imap support ... but
both of those start outside xinetd as daemons.

dovecot is easier to install and get working ... cyrus does virtual
users better...

_______________________________________________
Tao-discuss mailing list
[email protected]
http://mailman.taolinux.org/mailman/listinfo/tao-discuss

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQBCZ8ocTKkMgmrBY7MRAmHJAJwO64v98jQaa8KkgLADq5+ibW+ReACfdj5p
vPkPeDu9qTdhWHDIZ/gH9Zs=
=Lq0L
-----END PGP SIGNATURE-----