On Thu, Aug 13, 2009 at 11:49:46AM +0100, Ross, Derek (STFC,RAL,ESC) wrote:
> But SELinux is not new, its only that it is turned on in SL5 by
> default. I don't recall the sites clamouring for the the experiments
> to ensure that their code worked with SELinux on SL4, so I don't think
> we have a very strong case to demand that experiments fix all their
> code before we roll out SL5.
SELinux was enabled under EL4 it's just that EL5 added a few things like
heap exec protection etc. root was fixed shortly after that not to
require an executable heap but as always the experiments haven't
bothered to update root or backport the fix to their prefered version.
|