Lower Process Capabilities

[Matthew Woehlke]

Bill McGonigle wrote:
> What's it going to take to make most
> people who shut off SELinux stop doing that?

...being able to install bleeding-edge devel KDE to 
/usr/local/my-kde-install and be able to use that as my primary desktop.

I guess that would - at best - take some kind of "smart" auto-labeling 
on the first exec of an unlabeled process.

-- 
Matthew
Please do not quote my e-mail address unobfuscated in message bodies.
-- 
Disadvantage: Bad Puns [-5]
You constantly utter puns so egregious as to cause mental distress to 
anyone hearing them. This can, however, be used to distract enemies.