On Wed, 2007-08-29 at 17:09 +0100, Alan Cox wrote: > > Would any of you out there care to share with me any of your personal > > experiences with SELinux being useful to you (in any way whatsoever), on > > a single-user workstation? > > I leave it on On a single-user workstation I'd leave it on, because the real issue related to SELinux don't occur on single-user workstations, but in networks, where SELinux tends to interfere with network services. > and haven't had any problems with it for the past few > releases. Well, sometime earlier this week, an SELinux update caused my old i586 to run out of memory during a yum update - but that's definitely not a typical situation. I've also observed similar effects to occur during relabeling when with mock installed (infinite recursions into /var/lib/mock). > It makes a large subset of potentially exploitable holes turn > into rather unexploitable ones and that to me is of value. Ralf
