On Sunday, November 28, 2010 07:22 PM, Eero Volotinen wrote: >> You forgot "take on becoming the SELinux integration manager for that >> project with every single update". I've done that several times now > > In commercial service production, wasted time also costs money. > > I think it is easier/cheaper to use hardware firewalls and idp systems > to protect servers than fight with selinux on each server. > > SELinux tuning might work on companies with unlimited resources like > NSA .. or if you run server at home with unlimited free time to tune > it up. > Are you some secret agent for botnets? I know they love to get their hands on Linux boxes for use as their command centres for their Windows drones.