On Wednesday 07 April 2004 15:27, Richard Hally wrote:
So you are saying that some one can "own a box" (whatever
that means)
while SELinux is in enforcing mode?
And do what? :)
No, but if your SELinux policies are loose enough to allow a rouge rpm
to overwrite /etc/sysconfig/SELinux, then you've got to re-evaluate
your policies.
--
Jesse Keating RHCE (
geek.j2solutions.net)
Fedora Legacy Team (
www.fedoralegacy.org)
GPG Public Key (
geek.j2solutions.net/jkeating.j2solutions.pub)
Was I helpful? Let others know:
http://svcs.affero.net/rm.php?r=jkeating