Re: dumb newbie questions

[Stephen Smalley <sds@xxxxxxxxxxxxx>]

On Mon, 2005-06-20 at 11:14 -0400, Ivan Gyurdiev wrote: 
> SELinux is not supposed to be transparent. 
> That was my misunderstanding when I first encountered it,
> and I have accepted this requirement since then. 

Hmmm...well, SELinux is designed to provide transparency as much as
possible (e.g. it allows default domain transitions and file type
transitions to reduce the need to modify applications, and the ability
to configure policy means that you get to choose where to make
functionality vs. security tradeoffs).

> If you are interested in the extra security offered, then
> you have to put in some extra effort in making your
> applications run on top of this system. Hopefully as
> the policy becomes more mature, this will be less
> of an issue.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.