Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

audit2allow is not that hard for developers

Posted Oct 16, 2008 20:07 UTC (Thu) by Hawke (subscriber, #6978)
In reply to: audit2allow is not that hard for developers by dwheeler
Parent article: SELinux permissive domains

All the more reason for SELinux policies to be created by the developers most familiar with their applications, rather than by the SELinux developers or by distributions.

(Log in to post comments)

Posted Oct 17, 2008 9:42 UTC (Fri) by ballombe (subscriber, #9523) [Link]

There is also the benefit that developers can sometimes decide that the application behavior is not reasonable and fix the application instead of the policy.