Dan - thank you. selinux is outstanding - and through your efforts (and others) especially on the fedora policy files, grown over the last several years into something really useful. Anti-selinux folk. It takes work to deploy it on some systems for sure and I am just learning - i have a lot of work on one system to get it compliant. For many setups targeted policy works with no changes at all. Please avoid the rude remarks - i.e. be excellent :) If some of you are not using it fine. But to claim it has little or no security suggests nothing but enormous ignorance of security issues. If one does not have the xxx (time, resources, ability, whatever) to make the effort to tune those systems which need some work fine - dont do it - that decision has nothing to do with security - only _your_ choices. To Dan, Stephen (and the NSA) and all the others - thank you for helping advance linux security. gene/ -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines