Re: without selinux
cornel panceac wrote: hello, can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. I don't know. I'm not sure why you'd want to, what do you have in mind? Why Disabled or Permissive insufficient? -J -- in your fear, seek only peace in your fear, seek only love -d. bowie -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
On Fri, May 20, 2011 at 09:14:13PM +0300, cornel panceac wrote: hello, can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. Just to ask the stupid question, are you aware that it can be turned off at install with selinux=0, and, if you forgot that, can be disabled in /etc/sysconfig/selinux, as well as temporarily disabled with setenforce 0? Assuming you know that, which I suspect you do, and are referring to totally removing it, knowing Fedora, it's probably tied to other things that you wouldn't want to remove. Yeah, just tried it and it seems it will remove just about everything. :) -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6 Buffy: Okay, so I battle evil. But I don't really win. The bad keeps coming back and getting stronger. I'm like that kid in the story, the boy that stuck his finger in the duck. Angel: Dike. (Buffy looks at him) It's another word for dam. Buffy: Oh. Okay,that story makes a lot more sense now. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
cornel panceac wrote: can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. Define remove. If you mean disable then Fedora will run with SELinux set[1] to Disabled. If it doesn't then you should file a bug. [1] /etc/selinux/config -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
Michael Cronenworth wrote: cornel panceac wrote: can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. Define remove. If you mean disable then Fedora will run with SELinux set[1] to Disabled. If it doesn't then you should file a bug. [1] /etc/selinux/config I'm actually trying to envision a situation in which it wouldn't run with SELinux Disabled. I can't. But, yeah, removed. . .well, I had a user with too many privs once who removed python. Yeah. I know. Oh, come to think of it, two users. -J -- in your fear, seek only peace in your fear, seek only love -d. bowie -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
2011/5/20 Jon Ciesla l...@jcomserv.net Michael Cronenworth wrote: cornel panceac wrote: can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. Define remove. If you mean disable then Fedora will run with SELinux set[1] to Disabled. If it doesn't then you should file a bug. [1] /etc/selinux/config I'm actually trying to envision a situation in which it wouldn't run with SELinux Disabled. I can't. But, yeah, removed. . .well, I had a user with too many privs once who removed python. Yeah. I know. Oh, come to think of it, two users. -J -- in your fear, seek only peace in your fear, seek only love -d. bowie ok, to put it simply i don't need it. and remove like in yum remove selinux\* policy\*. one other reason is that the computer is not the fastest in the world and i don't want to waste time with yum upgrading things i don't need. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/20/2011 12:36 PM, Michael Cronenworth wrote: Jon Ciesla wrote: I'm actually trying to envision a situation in which it wouldn't run with SELinux Disabled. I can't. But, yeah, removed. . .well, I had a user with too many privs once who removed python. I cannot remember the exact case, but there was something with networking (maybe ping?) and SElinux preventing it when it was set to disabled. I have selinux disabled, and have for years and I don't have any issues. Kevin - -- Get my public GnuPG key from http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x7D0BD5D1 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk3WtR8ACgkQ6w2kMH0L1dFdTACfct2KwneMJO9C0oiOGGJrkmtZ UVkAnil9Ktu03jKMGFSIt6HmobOaMqBm =lYfq -END PGP SIGNATURE- -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
cornel panceac wrote: ok, to put it simply i don't need it. and remove like in yum remove selinux\* policy\*. one other reason is that the computer is not the fastest in the world and i don't want to waste time with yum upgrading things i don't need. Side note: This thread is a great candidate for the user list. You cannot remove SELinux completely from Fedora through yum. The best you can do is set it to Disabled and exclude selinux-* and libselinux from being upgraded. Note: Some packages may require newer SELinux packages and may fail to update if you exclude them. I don't see you benefiting at all from disabling/excluding SELinux. You're best off saving your pennies for a faster computer. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
2011/5/20 Michael Cronenworth m...@cchtml.com cornel panceac wrote: ok, to put it simply i don't need it. and remove like in yum remove selinux\* policy\*. one other reason is that the computer is not the fastest in the world and i don't want to waste time with yum upgrading things i don't need. Side note: This thread is a great candidate for the user list. You cannot remove SELinux completely from Fedora through yum. why not? The best you can do is set it to Disabled and exclude selinux-* and libselinux from being upgraded. Note: Some packages may require newer SELinux packages and may fail to update if you exclude them. I don't see you benefiting at all from disabling/excluding SELinux. You're best off saving your pennies for a faster computer. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
Michael Cronenworth wrote: cornel panceac wrote: ok, to put it simply i don't need it. and remove like in yum remove selinux\* policy\*. one other reason is that the computer is not the fastest in the world and i don't want to waste time with yum upgrading things i don't need. Side note: This thread is a great candidate for the user list. You cannot remove SELinux completely from Fedora through yum. The best you can do is set it to Disabled and exclude selinux-* and libselinux from being upgraded. Note: Some packages may require newer SELinux packages and may fail to update if you exclude them. I don't see you benefiting at all from disabling/excluding SELinux. You're best off saving your pennies for a faster computer. To be fair, speaking as a paranoid person with geriatric hardware, I have a 400Mhz PII with selinux and it's performance isn't affected by it's presence, and updates don't take *that* long. Certainly not to the point of any impact on anything. -J -- in your fear, seek only peace in your fear, seek only love -d. bowie -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
cornel panceac wrote: 2011/5/20 Michael Cronenworth m...@cchtml.com mailto:m...@cchtml.com cornel panceac wrote: ok, to put it simply i don't need it. and remove like in yum remove selinux\* policy\*. one other reason is that the computer is not the fastest in the world and i don't want to waste time with yum upgrading things i don't need. Side note: This thread is a great candidate for the user list. You cannot remove SELinux completely from Fedora through yum. why not? Because it will wipe out lots of packages that require it. Try yum remove selinux* (WITHOUT -y!!) and look at the list of things it wants to remove, and I bet you need at least something on that list. The best you can do is set it to Disabled and exclude selinux-* and libselinux from being upgraded. Note: Some packages may require newer SELinux packages and may fail to update if you exclude them. I don't see you benefiting at all from disabling/excluding SELinux. You're best off saving your pennies for a faster computer. -J -- in your fear, seek only peace in your fear, seek only love -d. bowie -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
On Fri, 20 May 2011 21:43:47 +0300 cornel panceac wrote: You cannot remove SELinux completely from Fedora through yum. why not? Because selinux libraries are linked with virtually every app. In fact the only way to completely eradicate it is probably switch to the gentoo distro and setup your default build parameters to undef all selinux ifdef flags :-). -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
2011/5/20 Tom Horsley horsley1...@gmail.com On Fri, 20 May 2011 21:43:47 +0300 cornel panceac wrote: You cannot remove SELinux completely from Fedora through yum. why not? Because selinux libraries are linked with virtually every app. In fact the only way to completely eradicate it is probably switch to the gentoo distro and setup your default build parameters to undef all selinux ifdef flags :-). :) ok, i'm trying now to remove it but this acer notebook has a strange limit on ethernet at about 30 kBps, so it will take some time till i'll confirm the deps problem. thank you all. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
cornel panceac cpanceac at gmail.com writes: hello,can fedora work without selinux? i'd like to remove it but last time i tried, (f10, maybe) the system no longer booted, without selinux. Well, I just looked out the window ... There are a couple of guys out there, with some funny head covers, smiling, waving arms in my direction, ... I do not know ... I do not like them ... :-) JB -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: without selinux
2011/5/20 Michael Cronenworth m...@cchtml.com Kevin DeKorte wrote: ping -R seems to work here as long as the hosts you are pinging allow it. I have found some up stream of me that do not. As the bug report states, the issue has long since been fixed. And did not affect Disabled. -- ok, f15 boots faster without selinux\* and policy\* there were no deps to remove. this is great! thank you all very much. once again fedora proves it's class. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test