Hacker News new | ask | show | jobs
by throw7 656 days ago
I disabled selinux after learning about dontaudit rules and having them waste my time.

That's not to say on very specific systems that need to be hardened, I do enable selinux and am glad it's an option. And if I have to use a security layer, I take the object based selinux over the path based apparmor.