On 19 October 2016 at 12:50, Matthew Miller <mattdm@fedoraproject.org> wrote:

First, these applications can be sandboxed, and
only able to access resources they're specifically allowed to,
increasing security.

With sandboxing using SELinux you don't need to change anything in existing packages.

Even better .. one of the reasons to develop SELinux was sandboxing.

Instead fiddling around generic packages start working on new package holding SELinux definitions holding exact services in sandboxes.

kloczek

Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH