Re: Selinux and Apache

["Arthur Pemberton" <pemboa gmail com>]

On Wed, Dec 10, 2008 at 9:55 AM, Michal Jaegermann <michal harddata com> wrote:
> On Wed, Dec 10, 2008 at 08:29:35PM +1100, Rob K wrote:
>>
>> It always baffles me that people can perform miracles of efficiency
>> with a line or two of impenetrable awk or sed, but selinux is
>> haaaaaaard.
>
> Writing impenetrable awk, if you have some clue what a regular
> expression may be, is quite difficult although very easy to achieve
> that with sed. :-)  But selinux is "haaaaaaard" and hard to bent if
> for whatever reasons you are venturing beyond defaults.  A constant
> stream of selinux policy updates attests to that.

Well that sucks. In trying to update and add policies, you seem to
imply the devs are only providing negative evidence against
themselves.


-- 
Fedora 9 : sulphur is good for the skin
( www.pembo13.com )