SELinux removed from desktop cd spin?
valent.turkovic at gmail.com
Thu Jan 17 10:12:17 UTC 2008
Arthur Pemberton wrote:
> On Jan 17, 2008 1:19 AM, Valent Turkovic <valent.turkovic at gmail.com> wrote:
>> Jeff Spaleta wrote:
>>> On Jan 16, 2008 12:35 PM, Valent Turkovic <valent.turkovic at gmail.com> wrote:
>>>> What is your target audience with SELinux?
>>> Everyone who runs a computer that takes input from an external source,
>>> whether that be floppies, or a network connection, or a bluetooth
>>> keyboard. Security matters... it doesn't matter if you are a desktop
>>> user or not... security matters. If we are doing a good enough job at
>>> policy writing and management then we fix the policies.
>> Will fedora include virus scanners? If not why?
>>> You really need to go back and read every single blog post from Dan
>>> Walsh concerning the new xguest policy he is working on. He's got
>>> very clear and very real desktop usage cases in mind for it. Turning
>>> selinux off wholesale on a desktop spin just because its not optimal
>>> yet, is short-sighted.
>> When it becomes usable for general use, by all means, enable it by
>> default. There is no real threat to linux desktop users from any source
>> and there has been zero viruses or explioits that had any significant
>> impact on any linux desktop. I don't see that changing in next 5 years
>> so why force desktop users now to have this rough edged products bother
>> them all the time?
> You have yet to explain why two clicks after install, or one click at
> first boot is too many.
It is not, nobody said that it was. The problem is people knowing that
those clicks mean. Does anaconda explain what SELinux does? Please show
me where if you see it because I don't.
More information about the devel