[Discuss] SELinux & IPTables

[Peter (peabo) Olson]

On April 2, 2014 at 2:28 PM Jerry Feldman <gaf at blu.org> wrote:
> One issue is that sometimes, companies make this a requirement, and the
> IT people who do the real work just have to follow the rules.
> Whenever I set up a new system I always to to /etc/selinux and change
> config to SELINUX=disabled
> I recently change SELINUXTYPE to disabled, and screwed up everything to
> where I could not even log in. That is what rescue systems are for.

I usually change it to 'permissive', which keeps things running while you get a
chance to review the logs to see what SELinux would like to do to you.

peabo