On Wed, 23 Feb 2005 06:22:11 -0500, Ivan Gyurdiev wrote:
That's because right now it runs in a "generic" user_t domain, which is used for all programs without their own policy. I don't think the SELinux people will agree to a workaround that applies to every other program in this domain.
Incidentally, am I the only one who thinks it's stupid for SELinux to be developing policy for random desktop applications upstream? I've raised this with the Fedora SELinux guys before - that approach can never work reliably.
You guys really need to nail stable binary distribution of policy *first*, and then write decent documentation so the people actually working on Inkscape can write and maintain policy. Otherwise the moment a new version comes out it'll require some random permission it the policy doesn't allow, and break in mysterious and subtle ways.
thanks -mike