[mythtv-users] mythv 0.27 test packages (future RPM Fusion)
Richard Shaw
hobbes1069 at gmail.com
Fri Sep 20 18:27:55 UTC 2013
On Fri, Sep 20, 2013 at 12:22 PM, Gary Buhrmaster <gary.buhrmaster at gmail.com
> wrote:
> On Fri, Sep 20, 2013 at 5:03 PM, Steve Magnani
> <user.serviceable at gmail.com> wrote:
> ...
> > I'm well aware of what a pain SELinux is to work with and that it's much
> > easier to sidestep it - so I understand a decision not to devote endless
> > hours "playing nice" with it.
>
> Well, since Richard is going to do the hard part of reviewing
> the mythweb code/package to assure FHS compatibility,
> doing just the SELinux part should be easier now. Maybe
> it will get higher in my todo list (unless Richard does that
> first too).
>
Go ahead and take a stab at it, I would have to teach myself selinux first
:)
> > But personally, if I am forced to choose between SELinux and mythweb, I
> > will have to choose SELinux. In my setup, mythweb runs on our home
> > server that's also our gateway to the Internet, and it's not worth the
> > risk (to me) to drop the shields just to achieve FHS compliance for
> > mythweb.
>
> There is some interesting discussions going on as to
> whether SELinux does what you want it to. However,
> as of now, there is no direct evidence that it does the
> reverse. You could always move to FreeBSD for an
> arguably better security environment for your gateway.
> Try FreeBSD, you will like it (and the MythTV BE can
> run on it, with some obvious limitations).
It may not be possible depending on how many computers you have available,
but you can run mythweb on a different computer from your FE or BE.... In
either case, the rework of the mythweb package wouldn't change what you
already have to do, you'd just point to different directories...
Thanks,
Richard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20130920/9b3f77a6/attachment.html>
More information about the mythtv-users
mailing list