On Thu, 10 Sep 2020 at 12:38, Neal Gompa <ngompa13@xxxxxxxxx> wrote: > Because Red Hat customers put the SELinux policy developers into > no-win situations: they complain about AVC denials that don't actually > significantly break anything in *their* app My response to that would be to ship a "AVC ignore-list" config file in userspace alongside the customer application -- rather than just pretending that SELinux didn't do anything at all for all apps. Richard _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
