SElinux

[Eugen Leitl]

On Sat, Apr 08, 2006 at 01:27:36AM -0500, Bruno Wolff III wrote:

> SELinux has value on Desktops, at least to some people. I would really like to
> be able to run programs that don't have the same access to resources (in
> particular network connections) that I do. I know longer trust software
> venders not to bad stuff in their software, at least for things targetted
> at consumers. Things are likely to get worse in this regard in the near
> future.

Use a vserver (possibly further locked down with grsecurity or similiar) 
for that.

If it's really critical, I use VMware and revert to previous snapshot
after a potentially hairy operation.

-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820            http://www.ativel.com
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20060408/96cb70fd/attachment-0001.sig>