Re: without selinux

2011-05-20 Thread Jon Ciesla
cornel panceac wrote:
 hello,

 can fedora work without selinux? i'd like to remove it but last time i 
 tried, (f10, maybe) the system no longer booted, without selinux.
I don't know.  I'm not sure why you'd want to, what do you have in 
mind?  Why Disabled or Permissive insufficient?

-J

-- 
in your fear, seek only peace
in your fear, seek only love

-d. bowie

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Scott Robbins
On Fri, May 20, 2011 at 09:14:13PM +0300, cornel panceac wrote:
 hello,
 
 can fedora work without selinux? i'd like to remove it but last time i tried,
 (f10, maybe) the system no longer booted, without selinux.

Just to ask the stupid question, are you aware that it can be turned off
at install with selinux=0, and, if you forgot that, can be disabled in
/etc/sysconfig/selinux, as well as temporarily disabled with setenforce
0?

Assuming you know that, which I suspect you do, and are referring to
totally removing it, knowing Fedora, it's probably tied to other things
that you wouldn't want to remove.  Yeah, just tried it and it seems it
will remove just about everything.  :)



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Buffy: Okay, so I battle evil. But I don't really win. The
bad keeps coming back and getting stronger.  I'm like that kid in the
story, the boy that stuck his finger in the duck.
Angel: Dike. (Buffy looks at him) It's another word for dam.
Buffy: Oh. Okay,that story makes a lot more sense now.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Michael Cronenworth
cornel panceac wrote:
 can fedora work without selinux? i'd like to remove it but last time i
 tried, (f10, maybe) the system no longer booted, without selinux.

Define remove.

If you mean disable then Fedora will run with SELinux set[1] to 
Disabled. If it doesn't then you should file a bug.

[1] /etc/selinux/config
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Jon Ciesla
Michael Cronenworth wrote:
 cornel panceac wrote:
   
 can fedora work without selinux? i'd like to remove it but last time i
 tried, (f10, maybe) the system no longer booted, without selinux.
 

 Define remove.

 If you mean disable then Fedora will run with SELinux set[1] to 
 Disabled. If it doesn't then you should file a bug.

 [1] /etc/selinux/config
   
I'm actually trying to envision a situation in which it wouldn't run 
with SELinux Disabled.  I can't.  But, yeah, removed. . .well, I had a 
user with too many privs once who removed python. 

Yeah.  I know.

Oh, come to think of it, two users.

-J

-- 
in your fear, seek only peace
in your fear, seek only love

-d. bowie

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread cornel panceac
2011/5/20 Jon Ciesla l...@jcomserv.net

 Michael Cronenworth wrote:
  cornel panceac wrote:
 
  can fedora work without selinux? i'd like to remove it but last time i
  tried, (f10, maybe) the system no longer booted, without selinux.
 
 
  Define remove.
 
  If you mean disable then Fedora will run with SELinux set[1] to
  Disabled. If it doesn't then you should file a bug.
 
  [1] /etc/selinux/config
 
 I'm actually trying to envision a situation in which it wouldn't run
 with SELinux Disabled.  I can't.  But, yeah, removed. . .well, I had a
 user with too many privs once who removed python.

 Yeah.  I know.

 Oh, come to think of it, two users.

 -J

 --
 in your fear, seek only peace
 in your fear, seek only love

 -d. bowie


ok, to put it simply i don't need it. and remove like in yum remove
selinux\* policy\*.
one other reason is that the computer is not the fastest in the world and i
don't want to waste time with yum upgrading things i don't need.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test

Re: without selinux

2011-05-20 Thread Kevin DeKorte
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 05/20/2011 12:36 PM, Michael Cronenworth wrote:
 Jon Ciesla wrote:
 I'm actually trying to envision a situation in which it wouldn't run
 with SELinux Disabled.  I can't.  But, yeah, removed. . .well, I had a
 user with too many privs once who removed python.
 
 I cannot remember the exact case, but there was something with 
 networking (maybe ping?) and SElinux preventing it when it was set to 
 disabled.

I have selinux disabled, and have for years and I don't have any issues.

Kevin

- -- 
Get my public GnuPG key from
http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x7D0BD5D1
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk3WtR8ACgkQ6w2kMH0L1dFdTACfct2KwneMJO9C0oiOGGJrkmtZ
UVkAnil9Ktu03jKMGFSIt6HmobOaMqBm
=lYfq
-END PGP SIGNATURE-
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Michael Cronenworth
cornel panceac wrote:
 ok, to put it simply i don't need it. and remove like in yum remove
 selinux\* policy\*.
 one other reason is that the computer is not the fastest in the world
 and i don't want to waste time with yum upgrading things i don't need.

Side note: This thread is a great candidate for the user list.

You cannot remove SELinux completely from Fedora through yum. The best 
you can do is set it to Disabled and exclude selinux-* and libselinux 
from being upgraded. Note: Some packages may require newer SELinux 
packages and may fail to update if you exclude them.

I don't see you benefiting at all from disabling/excluding SELinux. 
You're best off saving your pennies for a faster computer.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread cornel panceac
2011/5/20 Michael Cronenworth m...@cchtml.com

 cornel panceac wrote:
  ok, to put it simply i don't need it. and remove like in yum remove
  selinux\* policy\*.
  one other reason is that the computer is not the fastest in the world
  and i don't want to waste time with yum upgrading things i don't need.

 Side note: This thread is a great candidate for the user list.

 You cannot remove SELinux completely from Fedora through yum.


 why not?

The best
 you can do is set it to Disabled and exclude selinux-* and libselinux
 from being upgraded. Note: Some packages may require newer SELinux
 packages and may fail to update if you exclude them.

 I don't see you benefiting at all from disabling/excluding SELinux.
 You're best off saving your pennies for a faster computer.


-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test

Re: without selinux

2011-05-20 Thread Jon Ciesla
Michael Cronenworth wrote:
 cornel panceac wrote:
   
 ok, to put it simply i don't need it. and remove like in yum remove
 selinux\* policy\*.
 one other reason is that the computer is not the fastest in the world
 and i don't want to waste time with yum upgrading things i don't need.
 

 Side note: This thread is a great candidate for the user list.

 You cannot remove SELinux completely from Fedora through yum. The best 
 you can do is set it to Disabled and exclude selinux-* and libselinux 
 from being upgraded. Note: Some packages may require newer SELinux 
 packages and may fail to update if you exclude them.

 I don't see you benefiting at all from disabling/excluding SELinux. 
 You're best off saving your pennies for a faster computer.
   
To be fair, speaking as a paranoid person with geriatric hardware, I 
have a 400Mhz PII with selinux and it's performance isn't affected by 
it's presence, and updates don't take *that* long.  Certainly not to the 
point of any impact on anything.

-J

-- 
in your fear, seek only peace
in your fear, seek only love

-d. bowie

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Jon Ciesla
cornel panceac wrote:


 2011/5/20 Michael Cronenworth m...@cchtml.com mailto:m...@cchtml.com

 cornel panceac wrote:
  ok, to put it simply i don't need it. and remove like in yum remove
  selinux\* policy\*.
  one other reason is that the computer is not the fastest in the
 world
  and i don't want to waste time with yum upgrading things i don't
 need.

 Side note: This thread is a great candidate for the user list.

 You cannot remove SELinux completely from Fedora through yum. 


  why not?

Because it will wipe out lots of packages that require it.  Try yum 
remove selinux* (WITHOUT -y!!) and look at the list of things it 
wants to remove, and I bet you need at least something on that list.

 The best
 you can do is set it to Disabled and exclude selinux-* and libselinux
 from being upgraded. Note: Some packages may require newer SELinux
 packages and may fail to update if you exclude them.

 I don't see you benefiting at all from disabling/excluding SELinux.
 You're best off saving your pennies for a faster computer.


-J

-- 
in your fear, seek only peace
in your fear, seek only love

-d. bowie

-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread Tom Horsley
On Fri, 20 May 2011 21:43:47 +0300
cornel panceac wrote:

  You cannot remove SELinux completely from Fedora through yum.  
 
  why not?

Because selinux libraries are linked with virtually every
app. In fact the only way to completely eradicate it is
probably switch to the gentoo distro and setup your default
build parameters to undef all selinux ifdef flags :-).
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread cornel panceac
2011/5/20 Tom Horsley horsley1...@gmail.com

 On Fri, 20 May 2011 21:43:47 +0300
 cornel panceac wrote:

   You cannot remove SELinux completely from Fedora through yum.
 
   why not?

 Because selinux libraries are linked with virtually every
 app. In fact the only way to completely eradicate it is
 probably switch to the gentoo distro and setup your default
 build parameters to undef all selinux ifdef flags :-).

 :)
ok, i'm trying now to remove it but this acer notebook has a strange limit
on ethernet at about 30 kBps, so it will take some time  till i'll confirm
the deps problem. thank you all.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test

Re: without selinux

2011-05-20 Thread JB
cornel panceac cpanceac at gmail.com writes:

 
 hello,can fedora work without selinux? i'd like to remove it but last time i
tried, (f10, maybe) the system no longer booted, without selinux.
 

Well, I just looked out the window ...

There are a couple of guys out there, with some funny head covers, smiling,
waving arms in my direction, ...

I do not know ... I do not like them ... :-)

JB


-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test


Re: without selinux

2011-05-20 Thread cornel panceac
2011/5/20 Michael Cronenworth m...@cchtml.com

 Kevin DeKorte wrote:
  ping -R seems to work here as long as the hosts you are pinging allow
  it. I have found some up stream of me that do not.

 As the bug report states, the issue has long since been fixed.

 And did not affect Disabled.
 --

 ok, f15 boots faster without selinux\* and policy\*
there were no deps  to remove. this is great! thank you all very much. once
again fedora proves it's class.
-- 
test mailing list
test@lists.fedoraproject.org
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test