Comment

Comment by wannacboatmovie

The problem with SELinux is it's very fragile and basically broken outside RedHat distros.

As an experiment I installed SELinux on Debian and while I was eventually able to get it stable and working after a lot of trial and error, a disk swap followed by an rsync broke it irreparably. Yes I rescanned the disk or whatever to have SEL relearn/reindex the objects, didn't work. The box was basically unbootable or it would boot and rejected all logins, including root directly to the console, something that should nearly never happen. Documentation is sparse or assumes you have RedHat and it 'just works'. After hours of troubleshooting the only thing that worked was switching it off and saying good riddance.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton