Cargo Cult sysadmining

[John Aldrich]

With respect to SELinux... I really have no idea whether it's  
currently enabled, enabled in "permissive" mode or disabled (I *think*  
it may be in "permissive" mode, but I wouldn't swear to it.) However,  
I got to thinking... it needs to be set up more like an antivirus  
program, i.e. smart enough to recognize what is there and act  
accordingly. What I do NOT want to see is something like a firewall in  
"paranoid" mode where it alerts on every little thing. I know early on  
SELinux was acting like a firewall in "paranoid" mode, which got more  
than a little annoying. I, for one, don't want to be constantly  
responding to alerts on standard apps trying to behave normally.