[LINK] Vista is Expensive

[Glen Turner]

Howard Lowndes wrote:
> ...  what really p!ssed me off was the
> constant nagging about "Vista wants to run xxxx" where xxxx would most
> likely be esoteric to Joe Sixpak anyway and he would click Yes just to
> get rid of the message; this nag comes up even if you are using the
> account that is set up as the administrator account - something it tells
> you it will be anyway.  I could see no way of getting a
> super-administrator status to get rid of the nag.


I've fiddled with Vista and come to the conclusion that
the user interface here is unworkable because the premise
is wrong.  The box shouldn't be asking for permission --
it should just be saying "tough luck".

I wouldn't have thought before-the-fact that this would
be a workable approach.  But having used SELinux with
Fedora Core 5 it works really well.  SELinux denies
the activity and write a audit record. That causes a
balloon to pop up with with the audit record. You can
click on a diagnose button if you need more information
and that diagnosis leads onto altering the SELinux
policy if that's what you want to do.

So it's always safe to ignore the balloon pop-ups, as they
are only telling you what has already happened.  But if
things didn't work like you thought they should (a file
couldn't be copied, etc) then you know why and can easily
alter the policy settings.