On 11/30/10 12:31 PM, m.roth@5-cent.us wrote:
And I notice that you don't address the other point, all the in-house apps, and if you think management will say "sure, spend whatever it takes to rewrite that so it conforms to selinux...", you're living in somewhere I don't. And just about everywhere I've worked, both as a developer and as a sysadmin had a *lot* of in-house apps.
90% of the time, you just have to reorganize the application installation directories to better suit the default settings.
for instance, all our java-ware can run just fine in /home/$APPUSER/$APPNAME and run as a regular user. if we want to put it in /opt/$COMPANY/$APP then we might have to play with selinux defaults some, since /opt isn't part of the RHEL mindset.