Desktop platforms Toolkit

Story: Red Hat readies Enterprise Linux 4

• 
• 

That's right. The SELinux policy in RHEL4 is what they call a "targeted policy" which is designed to be less complicated to manage. Instead of having a "deny all" default policy (similar to default policies in firewalls), it's an "accept all" policy to which further restrictions are added. At least, that's my understanding. It's going to be difficult enough for SELinux newcomers to figure out, so it's probably best that they use a targeted policy since most sysadmins aren't SELinux gurus yet. One can, at least with the latest Fedora Core, switch to a strict (deny all) policy by changing just one line in a config file, so it's there if someone wants to turn on full enforcement.

• 
• 

• 
• 
• 

Full Talkback thread