SELinux In Linux 6.4 Removes Run-Time Disabling Support

[phoronix]

Phoronix: SELinux In Linux 6.4 Removes Run-Time Disabling Support

After being deprecated for several years, Security Enhanced Linux "SELinux" beginning with the Linux 6.4 kernel can no longer be run-time disabled...

https://www.phoronix.com/news/SELinux-No-More-Runtime-Disable

[_r00t-]

Make it more usable.

[anarki2]

Make it more usable.

Learn to use it.

[uid313]

Good!

It sounds really stupid to be able to disable it at runtime. Sounds like it makes it a lot less secure and defeats the purpose of SELinux if it can be disabled so easy at any time.

[pipe13]

Good!

It sounds really stupid to be able to disable it at runtime. Sounds like it makes it a lot less secure and defeats the purpose of SELinux if it can be disabled so easy at any time.

Presumably "sudo setenforce 0" will still work. Otherwise my local Apache is hosed...

[StarterX4]

Good!

It sounds really stupid to be able to disable it at runtime. Sounds like it makes it a lot less secure and defeats the purpose of SELinux if it can be disabled so easy at any time.

I suppose it may complicate future Android rooting.

[AlanTuring69]

This is a short-sighted Linux-breaking feature to me. Surely the "genuis" authors of this change understand that the more code you have, especially code written by the NASA, the more bugs you have. Ideally we would increase security by removing this Googleware (spyware) but then where would the money to the authors go........

[rclark]

That's to bad. For home use it is one of those things I disable out of the gate. Now I'll have to do it at the kernel boot level. So it goes with security. Anything to make it 'harder' to do things.

[zexelon]

That's to bad. For home use it is one of those things I disable out of the gate. Now I'll have to do it at the kernel boot level. So it goes with security. Anything to make it 'harder' to do things.

Yeah... i have often found the Linux security model to be more about abusing the end user. At home or in the corporate environment! Its one of the major reasons why Linux is unable to break into the small business realm... it's just way to painful to try to do simple things around permissions, especially if you want to move data out of the default "package configured" directories.

More secure? Maybe... Deeply painful bordering on useless? 100%... (specifically wrt the non-cloud operators).

[ryao]

Learn to use it.

The time required to learn to use it correctly is likely comparable to learning a foreign language. :/