----- Original Message -----
On Fri, 2015-08-28 at 22:38 +0300, Elad Alfassa wrote:
<snip>
> The problem is I don't think it's wise to enable SELinux
by default
> without having any UI to let the user know when a violation happens.
> And we do want to keep SELinux enabled.
I do want to keep SELinux enabled. I don't think users need to know
when a violation happens. That's just a bug, and I don't see any reason
to treat SELinux bugs as more special or more horrible than other bugs.
But frankly, I don't remember the last time I've had an SELinux
violation. totem-video-thumbnailer gets blocked from accessing the
Internet whenever I view my web cache in nautilus, but that's a real
bug in totem.
Reproducer welcome, this bug lacks one:
https://bugzilla.redhat.com/show_bug.cgi?id=1135718#c1