On Mon, Mar 11, 2013 at 03:28:47AM +0100, Kevin Kofler wrote:
Lennart Poettering wrote:
> True thing. libselinux is a library we really really should avoid
> linking against.
Why the sarcasm? SELinux and libselinux only ever cause problems, why can't
we finally kick them out of Fedora?
This is a tad unfair. SELinux is (more than theoretically) a last
line of defence against some exploits, and for at least a few years
I've been able to run my laptop with SELinux set to enforcing, only
disabling it occasionally to do specific tasks or when investigating
permissions problems.
Rich.
--
Richard Jones, Virtualization Group, Red Hat
http://people.redhat.com/~rjones
Read my programming blog:
http://rwmj.wordpress.com
Fedora now supports 80 OCaml packages (the OPEN alternative to F#)