Fedora and CAPP
Posted Dec 15, 2008 23:30 UTC (Mon) by Tet
In reply to: Fedora and CAPP
Parent article: Fedora and CAPP
I feel this is the sort of thing that needs to be done modularly.
LSB compliance is provided modularly, we don't require default desktop installation to be LSB compliant. But a Fedora install can be made compliant via the installation of a package.
Agreed 100%. So why not implement the ban on running these apps with SELinux rather than with permissions? Any LSPP/CAPP compliant machine will be running SELinux anyway, and that way, there could be an selinux-policy-capp package for those that need it, and those that don't can do without.
to post comments)