3 ms·

Building policy by just auditing is a bad idea - you'll end up with overly general roles. Policy building is best left to the author of the applications so that

Building policy by just auditing is a bad idea - you'll end up with overly general roles. Policy building is best left to the author of the applications so that they can test against it and lock it down.

problems 9y ago
So what's your suggestion? Just disable SELinux for that application if it's failing?