On 9/22/07, Beartooth <Beartooth@xxxxxxxx> wrote: > On Fri, 21 Sep 2007 21:15:52 +0530, Rahul Sundaram wrote: > > > Arthur Pemberton wrote: > [....] > >> The SELinux devs have created apps which all but automate fixing of > >> most SELinux problems for you. And, they have made it really easy to > >> turn off. So I don't know more you want other than more and better > >> rules, and possible a GUI rule builder. > > > > There is already one FYI > > > > See > > http://www.redhatmagazine.com/2007/08/21/a-step-by-step-guide-to- > building-a-new-selinux-policy-module/ > > And thereby hangs an old sad tale. I looked at that -- and found > it utterly incomprehensible. The GUI linked to is for _building_ rules. Very few people need to actually build rules. The setroubleshoot tool generally gives the exact command one needs to fix what ever problem was found. -- Fedora 7 : sipping some of that moonshine ( www.pembo13.com )