| |||||||||||||
ComplexityComplexityPosted Sep 23, 2004 4:57 UTC (Thu) by walters (subscriber, #7396)In reply to: Complexity by dvdeug Parent article: An introduction to SELinux
The point is that securing a complex system is going to be complex. There simply aren't any shortcuts. However, as Stephen says, SELinux is very flexible, as is exemplified by the new targeted policy. The targeted policy is really quite simple, and it's *very* easy to just turn restrictions on a particular service off now with the support for runtime boolean policy changes.
(Log in to post comments)
Complexity Posted Sep 30, 2004 8:44 UTC (Thu) by emj (guest, #14307) [Link] > The point is that securing a complex system is going to be complex.
Well, if setting up an ordinary multiuser shell/ftp/web server is going to be complex, then SELinux is to complex.
|
|||||||||||||