Dennis Wronka wrote: > ... > > So, what the heck is the use of su on a SELinux-system? An aspect of su that is frequently overlooked is that su provides a mechanism to Switch User (that's what it's short for) and that there are cases where you might want to perform an action as another unprivileged user. On SELinux su should properly be thought of as either a DAC tool or an I&A mechanism, depending on the needs of the people to whom you're explaining the system. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.