On 01/04/2015 09:47 AM, Sid S wrote: > >> SELinux is the only one I've had a bit of experience with - I run CentOS >> (SELinux is enabled by default) for some personal-use-only services that >> I want to run without dealing with Gentoo. My first step in a CentOS >> install is to disable SELinux (and the firewall, hehe) to avoid dealing >> with the pain of wading through documentation for hours on end. > http://stopdisablingselinux.com/ - your distribution probably comes > with policies for everything you want to install, anyway... >
Sid, thanks again. I've just remembered a couple public-facing servers I administer that run CentOS and I think it's about time to spend an hour or two learning SELinux for at least the one that runs Redmine. Alec