Bruno Wolff III wrote:
On Fri, Feb 29, 2008 at 16:42:34 -0800, Konstantin Svist <fry kun gmail com> wrote:People mentioned on this list that selinux errors are fixed really fast - so I decided why not submit a few into redhat bugzilla?Remember that not all errors reported by selinux are selinux problems. Some are the apps doing things they shouldn't and those need to get fixed by the app maintainer, not the selinux guys.
But then what am I, as the end-user, supposed to do? Supposedly, if the app isn't fixed right away, I should allow the activity by creating a rule -- but there doesn't seem to be an easy way of doing that. In essence, as the article says, selinux is well-suited for servers, not for desktops. Though I doubt how well it's suited for servers, since you still need to be able to do some voodoo ritual to get the server stuff working. If it's not common knowledge or completely automated, it's pretty much useless.