On 19 October 2016 at 12:50, Matthew Miller <mattdm(a)fedoraproject.org>
First, these applications can be sandboxed, and
only able to access resources they're specifically allowed to,
With sandboxing using SELinux you don't need to change anything in existing
Even better .. one of the reasons to develop SELinux was sandboxing.
Instead fiddling around generic packages start working on new package
holding SELinux definitions holding exact services in sandboxes.
Tomasz Kłoczko | LinkedIn: *http://lnkd.in/FXPWxH <http://lnkd.in/FXPWxH>*