On 04/01/2010 09:31 AM, Stephen Smalley wrote:
Just to reinforce this point: Building a custom kernel is simply not an option for many users, whether due to evaluation and accreditation requirements, getting support, or whatever. Whereas installing additional userspace and performing configuration of system is much more feasible. Disabling the kernel option precludes use of this functionality for many users who could otherwise make use of it.
Yes, but people who have those restrictions are far more likely to be doing those operations on RHEL, as opposed to Fedora.
~spot