-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Apr 05, 2006 at 09:55:47AM -0500, Les Mikesell wrote: > On Wed, 2006-04-05 at 07:27, Paul Heinlein wrote: > > On Wed, 5 Apr 2006, Rodrigo Barbosa wrote: > > > > > All told, once you understand the basics, SELinux is a nice asset. > > > But it is not easy. > > > > Well said! > > The problem is that you not only have to understand SELinux, you > have to understand the access requirements of all the applications > that it controls. These may be fast-changing and controlled by > different teams of people, they may have been done long ago > by people who have moved on, or they may be third party products > dropped in because no one locally wants to deal with that kind > of stuff. Or you just do as I do, and keep an eye on "dmesg". Sure, it is a stupid way to do it, but it works. - -- Rodrigo Barbosa <rodrigob at suespammers.org> "Quid quid Latine dictum sit, altum viditur" "Be excellent to each other ..." - Bill & Ted (Wyld Stallyns) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFEM+fvpdyWzQ5b5ckRAp+fAKCovfpdSnGsjE+lyELkbNo2Qiuv6QCfSU0n BSZuFVPZR+TyQInQpeILfu0= =WKnT -----END PGP SIGNATURE-----