Feature Request "secure by default"

[Rahul Sundaram]

Matej Cepl wrote:
> On 2007-06-11, 12:32 GMT, Simon Jolle wrote:
>> It is too complicated. Nobody have the knowledge to deploy 
>> custom SELinux profiles. We run third-party applications like 
>> Websphere, Oracle and other proprietary stuff.
> 
> It's hard to believe that we don't have a policy for stuff like 
> that -- after all these are our biggest customers' apps (I 
> suppose). Chmm, strange.

We don't require policy for these programs since they are supposed to 
run in unconfined (ie) classic DAC security mode.

Rahul