trying to understand SELinux message

Paul Allen Newell pnewell at cs.cmu.edu
Mon Nov 16 06:29:45 UTC 2009


Mr. Teo En Ming (Zhang Enming) wrote:
> On Mon, Nov 16, 2009 at 2:20 PM, Paul Allen Newell <pnewell at cs.cmu.edu> wrote:
>   
>> Mr. Teo En Ming (Zhang Enming) wrote:
>>     
>>
>
> >From Wikipedia:
>
> “...given the threat models and capabilities of the adversaries
> involved, that's probably appropriate... But that’s not necessarily
> appropriate for all users. SELINUX is so horrible to use, that after
> wasting a large amount of time enabling it and then watching all of my
> applications die a horrible death since they didn't have the
> appropriate hand-crafted security policy, caused me to swear off of
> it. For me, given my threat model and how much my time is worth, life
> is too short for SELinux.” — Theodore Ts’o
>
> :-)
>
>   
Touché




More information about the fedora-list mailing list