On Mon, 2007-09-24 at 17:43 -0500, Mike McCarty wrote: > I KNOW what SELinux is. I KNOW how it is intended to work. Then why do you keep making demonstrably false statements about it? You started off saying that your hardware firewall provided sufficient protection. Then you kept screaming that you knew all about how it worked even as multiple people tried in vain to explain that SELinux was there to help in cases that the firewall wouldn't help with. More recently, you've claimed that it works, mechanically, just like MSDOS Flu-shot+. To those who actually know what SELinux is about, neither of those is true. > How many times does THAT need to be explained? Until that other Mike McCarty stops posting crap about SELinux. > The apps I'm talking about are find, ls, mv, cp, ssh, etc. Since the file contexts are required by the kernel, I see no reason (none) that ls shouldn't be able to show them to me based on a command line parameter. Otherwise, it's not "taking up cycles" as you have said.