Re: Desktop apps interoperability

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

On Thu, 2005-03-31 at 23:13 +0200, Tom wrote:
> He does have a point, though - sometimes the application can not be
> changed. It may be a legacy application and for all I care, those are
> the ones most in need of a protective cage.

Sure, and at that point, you just confine it as best as you can while
still allowing whatever functionality you require.  SELinux supports
that need just fine.  But you don't want to just accept that status quo
for all applications for all time, which seemed to be Casey's attitude.
 
-- 
Stephen Smalley <sds@xxxxxxxxxxxxx>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.