Posted Sep 23, 2004 9:56 UTC (Thu) by rwmj
In reply to: Complexity
Parent article: An introduction to SELinux
The reason SELinux permissions aren't based on file paths has also been explained many times. Put most simply, there are *many* possible ways to reference a file (inode) in Linux. You can have hard links, bind mounts, symlinks, etc.
So why can't the "compiler" work all this stuff out for me?
That's what computers are good at: automating all the grunt-work.
to post comments)