SELinux removed from desktop cd spin?
David Malcolm
dmalcolm at redhat.com
Thu Jan 17 18:35:04 UTC 2008
On Thu, 2008-01-17 at 19:20 +0100, Till Maas wrote:
> On Thu January 17 2008, Olivier Galibert wrote:
>
> > Now that's a superb example of one of the things that suck with
> > selinux: put "allow_execmod" in google and try to find a page that
> > actually explain what it means.
>
> Here the 6th result is:
> http://www.livejournal.com/go.bml?journal=danwalsh&itemid=13376&dir=next
> And on that page is a link to:
> http://people.redhat.com/~drepper/selinux-mem.html
>
> What are you missing there?
To be fair, are the policy types and booleans actually documented
somewhere? e.g. a set of manpages that could get autogenerated when the
policy package is built? Does the policy source language support some
kind of inline commenting that could be used doxygen-style to generate
docs (and check doc coverage)? Obviously, this would be aimed more at
the classic unix sysadmin rather than a desktop user
More information about the fedora-devel-list
mailing list