Hacker News new | ask | show | jobs
by SteveNuts 791 days ago
Tangentially, the "disable selinux" as a first step for installing software is incredibly lazy in 2024. There are tools that help you analyze in permissive mode and easily convert the output to the contexts you need.
2 comments

I agree with this. I'm kind of appalled by the apparent lack of SELinux controls on a firewall that runs Linux under the hood.

If I can run SELinux in enforcing mode on a Gentoo Desktop, any Linux administrator worthy of their job title can with a more enterprise/user friendly Linux distro too.

While I do run SELinux on Fedora and RHEL, I gotta say the errors it produces just being I/O errors is incredibly frustrating.