On Tue, 2004-04-06 at 14:59, Jesse Keating wrote:
While SELinux is very cool, and very usefull in corner cases of edge
servers, it's not very cool for workstations, desktops, general
servers, etc...
I'd encourage you to read the paper available from
http://www.nsa.gov/selinux/papers/inevit-abs.cfm. Quite independent of
any argument about enabling/disabling SELinux by default for FC2, just a
case that flexible MAC is important even for the desktop.
--
Stephen Smalley <sds(a)epoch.ncsc.mil>
National Security Agency