[CentOS] SELinux - way of the future or good idea but !!!

Wed Dec 8 18:02:10 UTC 2010
Les Mikesell <lesmikesell at gmail.com>

On 12/8/2010 11:38 AM, Lamar Owen wrote:
>> But your question was what to do if you choose to ignore the simple and
>> available tools - things available and well understood on many platforms.
> VM = complex.  Not to mention proprietary (for all but KVM) and resource-wasteful.
> Switch User = inconvenient to the extreme, and disruptive of normal workflow.
> I've done both, and neither are workable solutions for the majority of users, especially on the desktop.  Both are more complex than SELinux *could* be, with some effort.

*And* standards for the locations every application is permitted to access.

> Sounds like a budding standard to me, and something worth learning.

Standards committees have their ways of breaking all previous existing 
implementations with their final decrees.  Let me know when they are 

   Les Mikesell
    lesmikesell at gmail.com