Re: SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tim:
>> You have to wonder if those programs had such big problems because they
>> were badly coded, trying to do things that they shouldn't do.

Takehiko Abe:
> So you measure the quality of the programs with SELinux. Ouch.

I certainly put bad marks against programs which do unwise things (try
to read things they shouldn't, try to write where they shouldn't, try to
execute things that the shouldn't, etc.).  SELinux warnings are just one
set of red flags.

>> You see warnings with some programs about it trying to make something
>> executable that SELinux says shouldn't be necessary.  Suggesting that
>> the programmer is one those who believes that their software should be
>> able to do absolutely anything without any restriction.

> It does not suggest such a thing.

When I see warnings that some program has tried to read some file
completely unrelated to its operation, yes I do believe that the
programmer is one of those that thinks that their program should do
anything that they want, regardless of other concerns.

> Linux is not Microsoft Windows.

Though some programmers seem to think that it should be.  Some users,
too.

> No SELinux does not mean no restriction or no security.

I never said it.  But when you see something trying to read something
that it shouldn't, that was stopped by SELinux, it's a window into the
mindset of the program author.

-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux