Ralf Corsepius <rc040203@xxxxxxxxxx> writes: > * Is it appropriate to inform arbitrary ordinary users about SELinux > issues? That's a real good point, as are the others made in this thread. I think the bottom line here is that we are still working to get the selinux policies to the point where they work 99% for 99% of users. Once we're there we should switch over to operating behaviors that assume that most violations represent real security problems --- but for now I don't think we are there yet. What the current behaviors need to do is to encourage people to report results, so that we can collect more data about real vs phony violations. regards, tom lane -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list