On Wed, 2006-04-05 at 07:27, Paul Heinlein wrote: > On Wed, 5 Apr 2006, Rodrigo Barbosa wrote: > > > All told, once you understand the basics, SELinux is a nice asset. > > But it is not easy. > > Well said! The problem is that you not only have to understand SELinux, you have to understand the access requirements of all the applications that it controls. These may be fast-changing and controlled by different teams of people, they may have been done long ago by people who have moved on, or they may be third party products dropped in because no one locally wants to deal with that kind of stuff. -- Les Mikesell lesmikesell at gmail.com