-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Les Mikesell wrote: > David Boles wrote: >>> Do you have pointers to some success stories where that protection, as >>> implemented >>> in fedora, has worked? >>> >> >> >> Protection? Do you mean does SElinux actually stop unauthorized disk >> and file access? Sure it does. At time too well. It stops things that >> some people want. >> >> > I mean cases where the standard unix mechanisms failed first, then > selinux did > something useful. Now I am confused. What is "standard unix mechanisms"? Please clarify that statement for me. Nothing 'standard unix mechanisms' that I can think of does what SElinux does. Or is supposed to do. Have you actually looked and found out what it is that SElinus does? Or, again, it is supposed to do? >> You are making a mountain out of a mole hill here. If, I said if, the >> NSA was really interested in what you are doing on your computer they >> would go to your ISP and ask for your records. Your ISP keeps copies >> of every email that you have ever sent. And copies of every email, >> this one included, that you have ever received. They also keep records >> of every site that you have visited. What day and time and how long >> you stayed. What files you have downloaded. Maybe a pirated game? >> Maybe pirated music files. Maybe a little p0rn? Many things. And if >> the NSA really did want to see what is on your HD they would walk in >> and take it with them when they left. >> > I think you are being too kind. I think if they want evidence to > appear on your disk, they are capable of making that happen. > - -- David -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (MingW32) iD8DBQFFstpRAO0wNI1X4QERAtFtAKDMca0rJCKH+m3+YtNXDOiIMv37RgCg8w94 OH8BJP3VSUXUzLFhskTcF4w= =Lp+k -----END PGP SIGNATURE-----