On Thu, Oct 03, 2024 at 05:00:14PM +0300, Mikhail Ivanov wrote: > On 10/1/2024 10:09 AM, Günther Noack wrote: > > IMHO, the length of the "Defining and enforcing a security policy" section is > > slowly getting out of hand. This was easier to follow when it was only file > > system rules. -- I wonder whether we should split this up in subsections for the > > individual steps to give this a more logical outline, e.g. > > > > * Creating a ruleset > > * Adding rules to the ruleset > > * Adding a file system rule > > * Adding a network rule > > * Adding a socket rule > > * Enforcing the ruleset > > I agree, it's important to keep usage usage description as simple as it > possible. Should I include related commit in current patchset? Sure, sounds good to me. 👍 —Günther
