请教debian 6.0 中安装配置 selinux 的方法
- jr4bx
- 帖子: 110
- 注册时间: 2011-01-21 15:54
- Yume
- 帖子: 1015
- 注册时间: 2010-05-24 12:16
Re: 请教debian 6.0 中安装配置 selinux 的方法
apt-get install selinux
- jr4bx
- 帖子: 110
- 注册时间: 2011-01-21 15:54
- jr4bx
- 帖子: 110
- 注册时间: 2011-01-21 15:54
Re: 请教debian 6.0 中安装配置 selinux 的方法
But in my opinion you have 3 choices, in order to have a system which works properly:
1) Forget about the whole thing!
2) Use the default policies.
3) Waste time configuring it.
I'll explain each of these now...
1)You are walking in the streets (your country may not be like this, I live in Iran ) and someone attacks you with a weapon and tells you to give him all your money. You just have just a dollar in your wallet... Here the right choice would be giving them the money...Some other time, you have a million dollars and someone attacks you... Well, it may be better if you fight.What I'm trying to say, is that you should see what is more important to you. SELinux is not always good... Unless you waste your time on it (the 3rd option) it might cause many problems... Different services not running properly is a good example, which an experienced admin told me about it once.
2)This is a good choice, in my opinion. That's what I'm doing myself. This will give you a system which is running properly in most cases (the example I talked about, is still true. Some services may not work properly.) without any special problems.Besides, you won't have to waste lots of time on it.
3)I suggest you just forget about this option... You'd have to waste lots of time on the policies... Some just give up in the middle of the way... And even if you don't, I'm sure you will have lots of problems at the end.So
I don't know how you can fix this problem, in this situation. But I can suggest you the second option...
Oh wait, I remember some things! There is a page on Debian Wiki, which explains everything... It tells you how you can install SELinux with the default policies. But the more important thing, is the changes you need to make. See if they will help...
从以上http://forums.debian.net的回答中以及http://wiki.debian.org/SELinux的提示中得出的结论是
1。debian 稳定版不需要selinux
2。测试版和稳定版可以安装配置,但需专门知识,要花很多时间且有很多问题
1) Forget about the whole thing!
2) Use the default policies.
3) Waste time configuring it.
I'll explain each of these now...
1)You are walking in the streets (your country may not be like this, I live in Iran ) and someone attacks you with a weapon and tells you to give him all your money. You just have just a dollar in your wallet... Here the right choice would be giving them the money...Some other time, you have a million dollars and someone attacks you... Well, it may be better if you fight.What I'm trying to say, is that you should see what is more important to you. SELinux is not always good... Unless you waste your time on it (the 3rd option) it might cause many problems... Different services not running properly is a good example, which an experienced admin told me about it once.
2)This is a good choice, in my opinion. That's what I'm doing myself. This will give you a system which is running properly in most cases (the example I talked about, is still true. Some services may not work properly.) without any special problems.Besides, you won't have to waste lots of time on it.
3)I suggest you just forget about this option... You'd have to waste lots of time on the policies... Some just give up in the middle of the way... And even if you don't, I'm sure you will have lots of problems at the end.So
I don't know how you can fix this problem, in this situation. But I can suggest you the second option...
Oh wait, I remember some things! There is a page on Debian Wiki, which explains everything... It tells you how you can install SELinux with the default policies. But the more important thing, is the changes you need to make. See if they will help...
从以上http://forums.debian.net的回答中以及http://wiki.debian.org/SELinux的提示中得出的结论是
1。debian 稳定版不需要selinux
2。测试版和稳定版可以安装配置,但需专门知识,要花很多时间且有很多问题
产品就是人品!