Selinux in development releases

[John.Florian at dart.biz]

> From: "Jason L Tibbitts III" <tibbs at math.uh.edu>
> I'm something of an idiot when it comes to selinux; I used to know just
> enough to get a reasonable bug report out, but now I've even forgotten
> most of that.  I do know, however, that turning off dontaudit rules can
> save your sanity, because _way_ too much stuff fails silently.  Which is
> a horrible bug in itself but it seems to be by design.

I concur.  I suppose there's a good reason to not log some of these, but 
I've nearly lost my sanity more than once with these squelched messages. 
Life improved only once I realized my testing was missing 'setenforce 0' 
to see if that had any effect.

--
John Florian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/test/attachments/20120925/a20ffb54/attachment.html>