2008/1/16, Daniel P. Berrange <<a href="mailto:berrange@redhat.com">berrange@redhat.com</a>>:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Wed, Jan 16, 2008 at 08:57:56PM +0100, Valent Turkovic wrote:<br>> Hi,<br>> I believe that SELinux is a great linux server security hardening tool<br>> but that has little use in desktop linux usage and it confuses
<br>> ordinary desktop users.<br><br>It is of great use in a desktop spin. On my 'desktop' install for my<br>laptop I have many many system daemons running under a confined domain<br><br>auditd<br>console-kit-daemon
<br>crond<br>cupsd<br>dbus-daemon<br>hald<br>init<br>libvirtd<br>NetworkManager<br>rklogd<br>rpcbind<br>rpc.statd<br>rsyslogd<br>/sbin/dhclient<br>/sbin/mingetty<br>/sbin/udevd<br>/usr/bin/nm-vpnc-service<br>/usr/sbin/acpid
<br>/usr/sbin/dnsmasq<br>/usr/sbin/gdm-binary<br>/usr/sbin/hcid<br>/usr/sbin/smartd<br>/usr/sbin/sshd<br>/usr/sbin/wpa_supplicant<br><br><br>> If it hasn't been discussed before I would like to propose that on<br>> desktop cd spin SELinux is not installed by default, of course after
<br>> discussion and approval from you (fedora devels).<br><br>No. SELinux provides very real & important protection for desktop users.<br><br>Dan.<br>--<br>|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=|
<br>|=- Perl modules: <a href="http://search.cpan.org/~danberr/">http://search.cpan.org/~danberr/</a> -=|<br>|=- Projects: <a href="http://freshmeat.net/~danielpb/">http://freshmeat.net/~danielpb/
</a> -=|<br>|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|<br><br>--<br>fedora-devel-list mailing list<br><a href="mailto:fedora-devel-list@redhat.com">fedora-devel-list@redhat.com
</a><br><a href="https://www.redhat.com/mailman/listinfo/fedora-devel-list">https://www.redhat.com/mailman/listinfo/fedora-devel-list</a><br></blockquote></div><br>Yes, it protect internet connection from being shared, protects system from drivers, needed for some hardware and protects system from everything useful.
<br><br>It's question of policy, but SELinux on LiveCD maked me stupid in my brother's eyes.<br>I wanted to show him internet connection sharing via superb user friendly tool, which appeared in F8, but SELinux blocked my changed... Nice.
<br clear="all"><br>-- <br>Jakub 'Livio' Rusinek<br><a href="http://liviopl.jogger.pl/">http://liviopl.jogger.pl/</a>