Comment

Comment by strzibny

This is not a good advice.

You'll basically get Ubuntu that didn't have SELinux in the first place, and most people don't care.

SELinux is difficult to build from scratch but there are decent tools to build your policy in an automated fashion.

The advice should be this: Don't have time to deal with SELinux at the moment? Switch to permissive policy and deal with it later.

I included SELinux as one big chapter in my book Deployment from Scratch rather than skipping on it.

parent strzibny 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton