• 1
It's a nice tool and makes it easy to customise one's policies. However, there is a minor issue: the generated shell script that compiles the policy module and then packages it into an RPM package has a block of code that demands root powers. It's kind of strange to see such a block in a tool designed to support a system that avoids going superuser as much as possible. Moreover, there is no reason to require root: the module can be compiled as a non-privileged account and rpmbuild is supposed to be executed under non-root also.

  • 1
?

Log in