[PATCH] Hal privilige seperation

[Artem Kachitchkine]

>>BTW, is any distro regression-testing HAL with SELinux on a regular basis?
> 
> Fedora.  But what do you mean by regression testing?  HAL will fail or
> succeed based on the SELinux rules so I don't think you can test
> problems with HAL, only problems with the way the rules are set up.  For
> instance when HAL moved its scripts to /usr/share/hal/scripts we no
> longer had permissions to run the scripts and had to update the policy
> to allow HAL to run executables from /usr/share/hal/scripts.

By regression testing I meant verifying that HAL continues to run well 
in any of the supported configurations. SELinux is on the those 
configurations. So the example you gave with the scripts is the kind of 
problem regression testing should catch, and it's great to see it happening.

-Artem.