[Discuss] SELinux & IPTables

[gaf at blu.org (Jerry Feldman)]

I used to set it to permissive also, but I didn't like many of the messages.

On 04/02/2014 11:37 PM, John Malloy wrote:
>
> That's a good  idea!
>
>
>
> On Wed, Apr 2, 2014 at 11:21 PM, Peter (peabo) Olson <peabo at peabo.com
> <mailto:peabo at peabo.com>> wrote:
>
>     On April 2, 2014 at 2:28 PM Jerry Feldman <gaf at blu.org
>     <mailto:gaf at blu.org>> wrote:
>     > One issue is that sometimes, companies make this a requirement,
>     and the
>     > IT people who do the real work just have to follow the rules.
>     > Whenever I set up a new system I always to to /etc/selinux and
>     change
>     > config to SELINUX=disabled
>     > I recently change SELINUXTYPE to disabled, and screwed up
>     everything to
>     > where I could not even log in. That is what rescue systems are for.
>
>     I usually change it to 'permissive', which keeps things running
>     while you get a
>     chance to review the logs to see what SELinux would like to do to you.
>
>     peabo
>     _______________________________________________
>     Discuss mailing list
>     Discuss at blu.org <mailto:Discuss at blu.org>
>     http://lists.blu.org/mailman/listinfo/discuss
>
>
>
>
> -- 
>
> John Malloy
> jomalloy at gmail.com <mailto:jomalloy at gmail.com>

-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix
PGP key id:3BC1EB90 
PGP Key fingerprint: 49E2 C52A FC5A A31F 8D66  C0AF 7CEA 30FC 3BC1 EB90