-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wed, Apr 05, 2006 at 09:55:47AM -0500, Les Mikesell wrote:
On Wed, 2006-04-05 at 07:27, Paul Heinlein wrote:
On Wed, 5 Apr 2006, Rodrigo Barbosa wrote:
All told, once you understand the basics, SELinux is a nice asset. But it is not easy.
Well said!
The problem is that you not only have to understand SELinux, you have to understand the access requirements of all the applications that it controls. These may be fast-changing and controlled by different teams of people, they may have been done long ago by people who have moved on, or they may be third party products dropped in because no one locally wants to deal with that kind of stuff.
Or you just do as I do, and keep an eye on "dmesg".
Sure, it is a stupid way to do it, but it works.
- -- Rodrigo Barbosa rodrigob@suespammers.org "Quid quid Latine dictum sit, altum viditur" "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)