Is there a reason we do not turn on the file system hardlink/symlink protection in Rawhide?

[Casey Dahlin]

On Thu, Mar 14, 2013 at 09:08:48AM -0400, Daniel J Walsh wrote:
> Well I believe Ubunto has been using this feature for years and maybe we
> should consider turning it on via systemd or a unit file.  The breakage of AFD
> is not a legitimate reason for Fedora to turn it off.

Why not add an LSM call, security_follow_restricted_link()? Then you could ship
this protection with SELinux policy, and even turn it off per-label if specific
applications need the old behavior.

--CJD