SELinux should be off by default in FC3
Nathan Grennan
fedora-devel-list at cygnusx-1.org
Thu Oct 7 17:19:52 UTC 2004
On Thu, 2004-10-07 at 19:11 +0200, Arjan van de Ven wrote:
> On Thu, 2004-10-07 at 19:00, Stephen Smalley wrote:
> > Or alternatively, customize the policy to fit your needs. That is why
> > SELinux is flexible - because no single policy meets everyone's needs.
>
> while that is true it sure should be possible to have a policy that can
> be used by default and doesn't change existing "this works" practice.
> Even if that policy allows a bit more than you would want.
>
If such a policy can me made I would be happy. In the beginning I
thought SELinux sounded good, but experience with it suggests that
writing policy to such a fine-grained is just too labor intensive and
problematic.
More information about the devel
mailing list