[CentOS] SELinux

Rodrigo Barbosa rodrigob at suespammers.org
Wed Apr 5 15:53:19 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Apr 05, 2006 at 09:55:47AM -0500, Les Mikesell wrote:
> On Wed, 2006-04-05 at 07:27, Paul Heinlein wrote:
> > On Wed, 5 Apr 2006, Rodrigo Barbosa wrote:
> > 
> > > All told, once you understand the basics, SELinux is a nice asset. 
> > > But it is not easy.
> > 
> > Well said!
> 
> The problem is that you not only have to understand SELinux, you
> have to understand the access requirements of all the applications
> that it controls.  These may be fast-changing and controlled by
> different teams of people, they may have been done long ago
> by people who have moved on, or they may be third party products
> dropped in because no one locally wants to deal with that kind
> of stuff. 

Or you just do as I do, and keep an eye on "dmesg".

Sure, it is a stupid way to do it, but it works.

- -- 
Rodrigo Barbosa <rodrigob at suespammers.org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEM+fvpdyWzQ5b5ckRAp+fAKCovfpdSnGsjE+lyELkbNo2Qiuv6QCfSU0n
BSZuFVPZR+TyQInQpeILfu0=
=WKnT
-----END PGP SIGNATURE-----



More information about the CentOS mailing list