[CentOS] SELinux - way of the future or good idea but !!!

Christopher Chan christopher.chan at bradbury.edu.hk
Mon Nov 29 22:03:04 UTC 2010

On Monday, November 29, 2010 11:58 PM, aurfalien at gmail.com wrote:

>>> You end up with a zillion groups - which is
>>> pointless and unmaintainable.  Thank goodness for ACL support and
>>> setfacl/getfacl.
>> So what do you do when you have user-specific ACLs splattered randomly
>> through the filesystem and the members of the cooperating groups
>> change?
> Perhaps consult with Winblows AD admins as I'm sure they deal with
> this all the time.
> MS$ ACLs have been around for a very long time.

Heh. So we have been reduced to asking Windows admins how to implement 
best current practice.

More information about the CentOS mailing list