Tim wrote:
On Tue, 2005-11-01 at 14:23 -0800, Benjamin Franz wrote:
Or perhaps the much too frequent updates to SELinux that have been known to break machines as well (leading to many people disabling SELinux to avoid having their systems rendered unusable randomly by system updates).
Although I personally feel that SELinux is the wrong way to fix things (like firewalls to protect you from bad software, instead of improving the software), I have it running to see how it goes.
Improving the software itself is not orthogonal to adding a additional layer of protection like SELinux. Security works through layers.
regards Rahul