Re: Useless setroubleshoot alerts

2009-12-17 Thread Chuck Anderson
On Wed, Dec 09, 2009 at 01:34:45PM +, Christopher Brown wrote: > SELinux was quite good on F11 and F12. Now it would seem it is > starting to regress again. Your expectations are too high if you think rawhide shouldn't have regressions. -- fedora-devel-list mailing list fedora-devel-list@r

Re: Useless setroubleshoot alerts

2009-12-09 Thread Christopher Brown
2009/12/8 Konstantin Ryabitsev : > >From the point of view of security usability, this is cardinal sin: > > http://file.status.net/identica/tieguy-20091208T063036-ngc2rhp.png > > If we start the warning message with "SELinux has detected suspicious > behaviour on your system" and end it with "You c

Useless setroubleshoot alerts

2009-12-08 Thread Konstantin Ryabitsev
>From the point of view of security usability, this is cardinal sin: http://file.status.net/identica/tieguy-20091208T063036-ngc2rhp.png If we start the warning message with "SELinux has detected suspicious behaviour on your system" and end it with "You can safely ignore this avc," then we are doi