On 2008-01-04, 17:07 GMT, John Dennis wrote:
Re SELinux usability issues:
We wrote the setroubleshoot package precisely to help SELinux novice users so they wouldn't suffer with hidden obscure failures of the type which have frustrated you. If it had been installed you would have received notifications in real time on your desktop describing the failure and suggestions on how to fix it.
But you should probably emphasize more that relabel needs to be done on systems where SELinux was not used before. I know it is in man page, but apparently there are still very smart people who didn't get the memo.
Matěj