Post Az6fWZeMETYmhr5kZ6 by cryptgoat@fedifreu.de
(DIR) More posts by cryptgoat@fedifreu.de
(DIR) Post #Az6fWZeMETYmhr5kZ6 by cryptgoat@fedifreu.de
2025-10-11T17:34:21Z
0 likes, 0 repeats
Judging by the amount I have run into #SELinux related issues while working with #RHEL based servers and my current #Fedora workstation setup I start to wonder if the enhanced security is worth all the trouble... 😮💨 Example: SELinux blocked my private key file for my OpenVPN config. OpenVPN rescued to start without giving a helpful error message. journalctl was helpful but it takes some experience to figure this out.How is "normal" computer / #Linux user supposed to figure this out? 😅
(DIR) Post #Az6og3dV0safttHrzU by centopus@101010.pl
2025-10-11T19:16:57Z
0 likes, 0 repeats
@cryptgoat First time? Its always few hours.After first time, you learn, to try same stuff in permissive mode... if it works, you troubleshoot with setroubleshoot thing.
(DIR) Post #Az8YKIx2BJia4twxCC by cryptgoat@fedifreu.de
2025-10-12T15:23:07Z
0 likes, 0 repeats
@centopus Nah, not the first time for me. It took me a few minutes as I know these kind of troubles from RHEl and Rocky Linux as part of my job.I am just afraid that a casual user would have been scared away from Linux when this would have been their first Linux encounter. Up until now I though Fedora could be recommended as an entry level distribution. 🤔 #AppArmor on Ubuntu seems to be less troublesome but I also guess that its default setup is way less strict than #Fedora's #SELinux configuration.
(DIR) Post #AzB16nOLUfNlQ7YTbs by aheadofthekrauts@social.tchncs.de
2025-10-13T19:55:06Z
0 likes, 0 repeats
@cryptgoat They used to include a tool that would pop up in case of AVC issues. It gave directions, i.e. full commands needed to modify selinux policies, to workaround the specific problem.Not sure why it's not included anymore.