On Wed, 2006-04-05 at 09:55 -0500, Les Mikesell wrote: > On Wed, 2006-04-05 at 07:27, Paul Heinlein wrote: > > On Wed, 5 Apr 2006, Rodrigo Barbosa wrote: > > > > > All told, once you understand the basics, SELinux is a nice asset. > > > But it is not easy. > > > > Well said! > > The problem is that you not only have to understand SELinux, you > have to understand the access requirements of all the applications > that it controls. These may be fast-changing and controlled by > different teams of people, they may have been done long ago > by people who have moved on, or they may be third party products > dropped in because no one locally wants to deal with that kind > of stuff. ---- running a server on CentOS 4, there isn't much you have to deal with on SELinux - and I would expect that you could relatively easily get answers to the issues caused by SELinux to the point where you wouldn't have to learn much. Craig