Re: SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tim:
>> You have to wonder if those programs had such big problems because they
>> were badly coded, trying to do things that they shouldn't do.

Takehiko Abe:
> So you measure the quality of the programs with SELinux. Ouch.

I certainly put bad marks against programs which do unwise things (try
to read things they shouldn't, try to write where they shouldn't, try to
execute things that the shouldn't, etc.).  SELinux warnings are just one
set of red flags.

>> You see warnings with some programs about it trying to make something
>> executable that SELinux says shouldn't be necessary.  Suggesting that
>> the programmer is one those who believes that their software should be
>> able to do absolutely anything without any restriction.

> It does not suggest such a thing.

When I see warnings that some program has tried to read some file
completely unrelated to its operation, yes I do believe that the
programmer is one of those that thinks that their program should do
anything that they want, regardless of other concerns.

> Linux is not Microsoft Windows.

Though some programmers seem to think that it should be.  Some users,
too.

> No SELinux does not mean no restriction or no security.

I never said it.  But when you see something trying to read something
that it shouldn't, that was stopped by SELinux, it's a window into the
mindset of the program author.

-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux