Re: ... fedora-selinux

From: Jim Cornette (jim-cornette_at_insight.rr.com)
Date: 03/10/04

  • Next message: Will Clifton: "Re: Apple Cinema Display on Fedora Core 1?"
    To: fedora-list@redhat.com
    Date: Tue, 09 Mar 2004 23:08:42 -0500
    
    

    Bevan C. Bennett wrote:

    >
    >> It depends on how well it keeps itself inline with staying out of
    >> site for a normal user. I have no guess on the percentage of Linux
    >> users that will not override the SELinux features. I am open to the
    >> concept. But do not want additional problems thrown into the mix. NT4
    >> as comparison caused me headaches as a user. I avoided it because it
    >> was not setup to stay out of the way of using a computer.
    >
    >
    > [Sorry for the excessive snipping.]

    No problem with the snippage.

    >
    > It's my understanding that the default security configuration will
    > stay out of the way and will provide a 'normal' seeming sort of
    > environment. I agree with you that the new default should not make it
    > more difficult for a normal user to use and manage their computer.
    >
    > The big bonus of SELinux is that you can then go in and, in a much
    > more fine grained manner than is currently possible, adjust how
    > certain things are or are not allowed to run. In the long run, this
    > will help make the system -more- useable than currently because you'll
    > be able to configure activities that are traditionally 'root only' to
    > be more accessible by authenticated (or power) users without opening
    > up everything else.
    >
    >
    This sounds like the right directon to take with the concept. I know the
    points brought up about running a cd-burner, without having to be root,
    will be much appreciated. I am sure that there are many now root
    priveleged items that will be more user friendly because of the SELinux
    activity.

    Jim

    -- 
    fedora-list mailing list
    fedora-list@redhat.com
    To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
    

  • Next message: Will Clifton: "Re: Apple Cinema Display on Fedora Core 1?"

    Relevant Pages

    • Re: user privledges
      ... > redhat 7.2 i created a user account for myself to use on a daily basis. ... > fare i have just been su - and entering the root pass. ... it started but would not install because i did ... sofware to /opt/musicmatch as a normal user. ...
      (comp.security.unix)
    • Re: jail() House Rock
      ... Think carefully about exactly what kind of privileges your clients get. ... normal user account on the main server, and root inside the jail. ...
      (FreeBSD-Security)
    • Re: [SLE] Firefox, fixed and broken again.... :-(
      ... >> through KDE as root but not as a normal user. ... But if it works for root, not for user, I ... I opened Firefox it opened fine. ... I then tried opening Firefox again - remember it ...
      (SuSE)
    • Re: GUI login screen.
      ... Well i think the best solution to get around this is to setup a normal user account... ... then edit the /etc/passwd file and set that person with root permissions so as soon as they login theyre automatically made root. ...
      (Debian-User)
    • Re: startx Fatal server error: Cannot open /dev/tty0
      ... > startx fails under your normal user login but starts normally under your ... the question become why root user ... can init the video device, ...
      (alt.os.linux.suse)