Paranoia for helpers - best practices

[Matthias Clasen]

On Tue, Mar 23, 2010 at 4:07 PM, Federico Mena Quintero
<federico at novell.com> wrote:


>
> So... my question is:
>
> * Do we need a list of best practices for PK helpers?
>
> * Do we need some helper APIs so that people can do operations like
> those with pre-tested code?
>
> * Do we need, in general, a drop_file_in_scary_place() function with
> some generic checks?
>

Of course, one answer is to contain your service using selinux policy,
but thats a rather big hammer, and not everybody is in the position to
just walk over to Dan Walsh's desk to have that sorted out....