7 ms·

Just make it work at the kernel syscall level. Maybe make it so you can have policies where syscalls can only affect some directories. Maybe we should call it

by TheDong 12y ago

Just make it work at the kernel syscall level. Maybe make it so you can have policies where syscalls can only affect some directories. Maybe we should call it "selinux"

CHY872 12y ago
Of course, but that has a reputation as being hard to set up into a configuration that doesn't get in the way.
- TheDong 12y ago
  Ah, yes, and not allowing deleting files or changing permissions and so on would give you security without ever getting in the way. Silly me.