Disabling SELinux's runtime disable
Disabling SELinux's runtime disable
Posted Apr 20, 2023 15:45 UTC (Thu) by intelfx (subscriber, #130118)In reply to: Disabling SELinux's runtime disable by tialaramex
Parent article: Disabling SELinux's runtime disable
> In fact it's often worth going back into systems where somebody was confused and tried turning "off" SELinux to see if that would solve a problem they don't understand, so as to turn it back "on" again now that any problems have been actually fixed.
>
> Like commented out code, disabled/ permissive SELinux settings in production servers are a bad smell. They say "I don't understand what I'm doing, I just tinker with things until they work and then I leave well alone and pray they keep working" which is presumably a fine way to be a cleric or a guru, but it's not engineering.
>
> Like commented out code, disabled/ permissive SELinux settings in production servers are a bad smell. They say "I don't understand what I'm doing, I just tinker with things until they work and then I leave well alone and pray they keep working" which is presumably a fine way to be a cleric or a guru, but it's not engineering.
No contest here. I was just wondering if the enforcement setting and the runtime disable setting were one and the same.