trying to understand SELinux message
Paul Allen Newell
pnewell at cs.cmu.edu
Mon Nov 16 06:29:45 UTC 2009
Mr. Teo En Ming (Zhang Enming) wrote:
> On Mon, Nov 16, 2009 at 2:20 PM, Paul Allen Newell <pnewell at cs.cmu.edu> wrote:
>
>> Mr. Teo En Ming (Zhang Enming) wrote:
>>
>>
>
> >From Wikipedia:
>
> “...given the threat models and capabilities of the adversaries
> involved, that's probably appropriate... But that’s not necessarily
> appropriate for all users. SELINUX is so horrible to use, that after
> wasting a large amount of time enabling it and then watching all of my
> applications die a horrible death since they didn't have the
> appropriate hand-crafted security policy, caused me to swear off of
> it. For me, given my threat model and how much my time is worth, life
> is too short for SELinux.” — Theodore Ts’o
>
> :-)
>
>
Touché
More information about the fedora-list
mailing list