On 01/26/2016 06:41 PM, Shawn Bakhtiar wrote:
In fact there isn’t a single good reason to have SELinux enabled out of the box ... The functions it (as with systemD) servers are limited to a select area of operations.
I'd like to point out that the default policy is "targeted", which means that it only affects the "select area of operations" where it can help to contain an attack.
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
