On Sat, 18 Nov 2006 00:46:48 +0000 "Ian Malone" <ibmalone@xxxxxxxxx> wrote: > I'm sure you're right, but I have no idea even what I'm allowing > them to do, and very little incentive to invest the time in SELinux > to find out how to make the decision. (And I'm sure that path > ends up with me trying to security audit every package on my > home machine which would be craziness.) That's why I use the must simpler approach of disabling selinux when I install and for good measure adding selinux=0 to the kernel boot options :-).