SELinux last straw

Andy Green andy at warmcat.com
Wed Oct 17 20:19:48 UTC 2007


Somebody in the thread at some point said:

>>> Regardless, you should have a way to check and fix it, unless what you
>>> are running is unimportant and you can abandon it.
>> Maybe a mode that blocks the process until you yea or nay it could be
>> interesting.
> 
> 
> So basically Windows vista for Linux? Cancel or Allow?

LOL doesn't sound so good like that.

Maybe instead there's a way to make a local rule to allow a particular
process, Les' critical process, and its children to basically run in
permissive, while everything else stays enforced.

-Andy




More information about the fedora-list mailing list