On Thu, 10 Sep 2020 at 12:38, Neal Gompa <ngompa13(a)gmail.com> wrote:
Because Red Hat customers put the SELinux policy developers into
no-win situations: they complain about AVC denials that don't actually
significantly break anything in *their* app
My response to that would be to ship a "AVC ignore-list" config file
in userspace alongside the customer application -- rather than just
pretending that SELinux didn't do anything at all for all apps.
Richard