Bruno Wolff III wrote:
On Fri, Feb 29, 2008 at 16:42:34 -0800,
Konstantin Svist <fry.kun@xxxxxxxxx> wrote:
People mentioned on this list that selinux errors are fixed really fast
- so I decided why not submit a few into redhat bugzilla?
Remember that not all errors reported by selinux are selinux problems.
Some are the apps doing things they shouldn't and those need to get
fixed by the app maintainer, not the selinux guys.
But then what am I, as the end-user, supposed to do? Supposedly, if the
app isn't fixed right away, I should allow the activity by creating a
rule -- but there doesn't seem to be an easy way of doing that.
In essence, as the article says, selinux is well-suited for servers, not
for desktops. Though I doubt how well it's suited for servers, since you
still need to be able to do some voodoo ritual to get the server stuff
working. If it's not common knowledge or completely automated, it's
pretty much useless.
