| |||||||||||||
|
| |||||||||||||
Google: a new approach to ChinaGoogle: a new approach to ChinaPosted Jan 15, 2010 17:37 UTC (Fri) by epa (subscriber, #39769)In reply to: Google: a new approach to China by rahulsundaram Parent article: Google: a new approach to China
these days several hundreds of programs are constrained by SELinux by default.Yes, I use Fedora and I appreciate the extra layer of security provided by SELinux. But we are talking about a different meaning of 'by default'. What I meant was, by default, if no policy file has been written for this application, run with a fairly restrictive set of permissions. A policy to allow, say, network access would have to be explicitly written and bound to that application. In Fedora, if you run a new program which has not received special attention from the Fedora SELinux team, by default it runs with the full permissions of your user account.
(Log in to post comments)
|
|
||||||||||||