[arch-general] Revisiting the SELinux/audit question: Disabling audit on the kernel command line

2017-02-12 Thread Tobias Markus
Hi, As some of you might know, the question of enabling SELinux support in the official Arch Linux kernel package has been brought up a number of times. The main issue that has been pointed out the previous time was that enabling SELinux depends on CONFIG_AUDIT which is considered unnecessary or e

Re: [arch-general] Revisiting the SELinux/audit question: Disabling audit on the kernel command line

2017-02-12 Thread SET
Le dimanche 12 février 2017 18:43:22 CET Tobias Markus a écrit : > I would be glad if Arch Linux's official kernel could support SELinux > again this way! >https://lists.archlinux.org/pipermail/arch-general/2014-March/035679.html Thank you for the link you posted. I went through most of the discus

Re: [arch-general] Revisiting the SELinux/audit question: Disabling audit on the kernel command line

2017-02-12 Thread Leonid Isaev
On Sun, Feb 12, 2017 at 06:43:22PM +0100, Tobias Markus wrote: > I would be glad if Arch Linux's official kernel could support SELinux > again this way! AFAIR, coreutils and many other things need to be rebuilt to support selinux. -- Leonid Isaev

Re: [arch-general] Revisiting the SELinux/audit question: Disabling audit on the kernel command line

2017-02-12 Thread Jeremy Brown
On Sun, Feb 12, 2017 at 08:53:19PM +0100, SET wrote: > Most users don't need SELinux/AppArmor or anything that protects them from > themselves; Not to nitpick, but given all the recent talk of things like gaping Webkit vulnerabilities I think the benefits of adopting something like AppArmor would

Re: [arch-general] Revisiting the SELinux/audit question: Disabling audit on the kernel command line

2017-02-12 Thread Nicolas Iooss
On Sun, Feb 12, 2017 at 6:43 PM, Tobias Markus wrote: > Hi, > > As some of you might know, the question of enabling SELinux support in > the official Arch Linux kernel package has been brought up a number of > times. The main issue that has been pointed out the previous time was > that enabling S