Attention: Proprietary video driver users (ATI, Nvidia, etc.)

Jeff Spaleta jspaleta at gmail.com
Thu Feb 23 14:34:00 UTC 2006


On 2/23/06, Rudolf Kastl <che666 at gmail.com> wrote:
> thats definitely a worst case scenario ;)

And sadly the most likely one, until there are some end-user oriented
notifications from the system which explain what is going on and why,
when an selinux related denial happens.  Having to keep a running tail
of /var/log/messages open and learning how to decipher the avc
messages while using vendor installers is a hurdle an order of
magnitude too large for normal home users who don't understand the
underlying issues.  And sadly, reaching out to other users tends to
get you blanket "turn off" selinux answers.  There is a steep learning
curve associated with selinux denials, and unless the fedora system
makes an attempt to point users to granular tools as the denials occur
the re-education effort is going to be hamstrung.

-jef




More information about the fedora-devel-list mailing list