On Wed, 05 May 2004 15:48:29 -0400 Stephen Smalley wrote: > >> In any case, a diagnostic-free run of 'fixfiles relabel' using a >> programmatically checked set of policy files should result in a pretty >> secure system. Yes? > >Hmm...well, an operating system that enforces your security goals, to >the extent that implementation is correct and underlying assumptions are >met ;) It certainly raises the bar in security. > Yes indeed, SEL certainly does raise the bar in security.