SELinux threads, cynicism, one-upmanship, etc.

[chrism at imntv.com (Chris Mauritz)]

Ron Jones wrote:

>
>>> No single user should ever have 'do 
>>>everything' rights once the system is running multiuser.
>>>    
>>>
>>
>>That's fine if you are willing to pay 3 people to do one job and
>>spy on each other.  So far no place I've worked has done that.
>>  
>>
>
> That sounds to me like a taxpayer-funded environment :-))



Exactly.  And SELinux was developed by the NSA who probably has 30 
people doing every task and each one spying on the other 29.  If you 
need that level of security/complexity mazel tov.  If you don't, just 
turn it off.

Cheers,