On 19 October 2016 at 12:50, Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> wrote:
First, these applications can be sandboxed, and
only able to access resources they're specifically allowed to,
increasing security.
With sandboxing using SELinux you don't need to change anything in existing packages.
Even better .. one of the reasons to develop SELinux was sandboxing.
Instead fiddling around generic packages start working on new package holding SELinux definitions holding exact services in sandboxes.
kloczek
--
Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH
_______________________________________________ packaging mailing list -- packaging@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to packaging-leave@xxxxxxxxxxxxxxxxxxxxxxx
